CVE-2024-21733

CVE-2024-21733-POC 注意： 1. tomcat 英文环境 2. 特定构造后端代码，如 ROOT/vulnerable.jsp 内所示 3. 如有需要，修改脚本中的服务器地址和端口 。默认 127.0.0.1:8080 4. 超时触发，默认 20 秒，一般会小于这个时间 流程： 1. 下载特定版本 tomcat https://archive.apache.org/dist/tomcat/ 或者使用 docker 环境：tomcat:9.0.43 root@kitploit: docker-compose up -d 2. 构造 vulnerable.jsp...

bluetoothdPoC

@RaniXCH bluetoothdPoC CVE-2018-4087 PoC ETA son? Is it a jailbreak? Depends, Got any kernel vulnerability? You're welcome chain them together. This one allow you to have huge attack surface from within the sandbox. https://www.weibo.com/ttarticle/p/show?id=2309404271293301154324 - @SparkZheng -...

Joomla3.7-SQLi-CVE-2017-8917

Summary It is a simple script to use ZoomEye API to batch-scan Joomla 3.7 SQL injection CVE-2017-8917. Usage git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Go!!! Reference...

drupal-cve-2026-9082-checker

DRUPAL CVE-2026-9082 检测工具 Drupal CVE-2026-9082 盲 SQL 注入检测工具 安装 root@kitploit: git clone https://github.com/N45HT/drupal-cve-2026-9082-checker.git cd drupal-cve-2026-9082-checker pip install -r requirements.txt 参考链接 https://vulners.com/cve/CVE-2026-9082 https://cwe.mitre.org/data/definitions/89.ht...

TFC-Chrome-v8-bug-CVE-2021-38001-poc

TFC-Chrome-v8-bug-CVE-2021-38001-poc 使用命令行运行 d8: ./d8 2.mjs...

log4shelldetect

log4shelldetect 递归扫描文件或文件夹，寻找可能受以下漏洞影响的Java程序： CVE-2021-44228 Log4Shell v2.0.x - v2.14.x CVE-2021-45046 v2.15.x CVE-2021-45105 v2.16.x1 通过检查文件内部的类路径。 如果只想打印可能受影响的文件而非所有文件，请使用 -mode list 运行。 用法 root@kitploit: Usage: log4shelldetect options Options: -include-zip include zip files in the scan -mode...

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995Batchscanningexp（last 2018-8-9） 针对CVE-2018-9995漏洞的dvr批量扫描脚本 CVE-2018-9995原利用脚本Original code 环境准备Environmental preparation python3、ubuntu root@kitploit: user@ubuntu:$ sudo pip3 install grequests user@ubuntu:$ sudo pip3 install tableprint 使用方式（usage mode） 将待扫描设备以ip:port形式存入csv文件第一列 The...

gitlab-RCE-11.4.7

gitlab-RCE-11.4.7 GitLab 11.4.7 CE RCE exploit with different reverse shells. CVE-2018-19571: https://nvd.nist.gov/vuln/detail/CVE-2018-19571 CVE-2018-19585: https://nvd.nist.gov/vuln/detail/CVE-2018-19585 Modification of the version from Sam Redmond and Tam Lai Yin in order to learn and practice...

apache__shiro_CVE-2023-34478_1-11-0

Apache Shiro Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and easily secure any application – from the smallest mobile applications to the...

zeroqlik-detect

Description A Nuclei template to detect ZeroQlik CVE-2023-41265 and CVE-2023-41266...

Sonic_CVE-2022-22274_poc

SonicCVE-2022-22274-poc https://nvd.nist.gov/vuln/detail/CVE-2022-22274...

CVE-2024-4358

CVE-2024-4358 An Vulnerability detection and Mass Exploitation tool for CVE-2024-4358 Installation: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-4358 pip install -r requirements.txt python3 exploit.py --help Usage: root@kitploit: python3 exploit.py -h / / / / / / / / | |/...

CVE-2025-27840

This repository does not have a README...

CVE-2021-22986

CVE-2021-22986 Usage: python exploit.py -u...

CVE-2017-8759

针对 CVE-2017-8759 的漏洞利用工具包 不要做一个混蛋 用 C 编写的简单工具，用于处理 .NET Framework 2.0、3.5、3.5.1、4.5.2、4.6、4.6.1、4.6.2 和 4.7 中的 RCE 漏洞。 又名“.NET Framework 远程代码执行漏洞。” 帮助 root@kitploit: C:\Users\Jonas Uliana\toolsCVE-2017-8759.exe /h INFO : Exploit toolkit for CVE-2017-8759 DEV : Uliana Tech SITE : https://uliana.te...

apche_unomi_rce

CVE-2020-13942 Original blog post about the vulnerability: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ There are two RCE vectors: through MVEL injection and through OGNL injection. Both vectors target different code though the payloads look relativel...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 Sorry Everyone. This is our team's testing program, not click bait. If you think we have others purpose, reconsider yourself. If you want to busfame, I don't care. Thanks @testanull, sorry for my English. I don't understand what people want in this repo?...

CVE-2013-3900-PowerShell-PoC

CVE-2013-3900-PowerShell-PoC Este PoC se proporciona únicamente con fines educativos y de investigación. El autor no asume ninguna responsabilidad por el mal uso o los daños causados por este código. Este script de PowerShell es una herramienta de prueba para simular el ataque descrito en...

propane

propane Exploits the arbitrary file write bug in ProFTPD's modcopy module CVE-2015-3306 and attempts code execution...

Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

Citrix has identified vulnerabilities in NetScaler ADC and NetScaler Gateway. The vulnerability with identifier CVE-2026-19489 involves a memory overflow in NetScaler ADC and NetScaler Gateway when the products are configured as SIP ALG within a Large Scale NAT LSN group. This memory allocation...