l4srs

l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-2021-44228 to build run cargo +nightly build This version will let you build command classes, dynamically serve a mini meterpreter that runs in a thread of the exploited Java app, and runs the LDAP and HTTP servers. This version servers...

CVE-2024-25600

Bricks Builder RCE Exploit CVE-2024-25600 Este proyecto contiene un script de explotación en Python dirigido a la vulnerabilidad de ejecución remota de código RCE en el plugin Bricks Builder de WordPress, identificada como CVE-2024-25600. El exploit permite la ejecución remota de comandos no...

CVE-2022-21907-RCE

CVE-2022-21907-RCE PoC de RCE para la vulnerabilidad CVE-2022-21907 Instrucciones de uso: go run ./CVE-2022-21907.go -h...

MAL-004

MAL-004: Bypass de Inyección de Comandos para CVE-2020-12641 en Roundcube Webmail Se encontró un bypass para "CVE-2020-12641: Inyección de Comandos a través de "imconvertpath" en Roundcube Webmail" que afecta a versiones anteriores a 1.4.5, 1.3.12. La función php “escapeshellcmd”, implementada pa...

blueborne-CVE-2017-1000251-POC

blueborne-CVE-2017-1000251-POC Simplemente cloné el repositorio de GitLab. Todo el crédito a: marcinguy Para propósitos educativos y de prueba únicamente. No está armado con un payload, solo una Prueba de Concepto, para demostrar que es posible...

CVE-2024-1208

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esto Instalar mediante pip root@kitploit: pip install CVE-2024-1208 Ejecuta el siguiente comando para comprobar CVE-2024-1208 -h Configuraciones 2. Nos...

NSEC3-Encloser-Attack

Generación de Zonefiles para el Ataque NSEC3-Encloser Este proyecto genera zonefiles DNS con parámetros NSEC3 personalizados para reproducir y evaluar los ataques descritos en CVE-2023-50868. Requisitos Python3 probado en Python3.10 Dependencias de Python instaladas: cryptography 42.0.5 dnspython...

SSRFX

CVE-2014-4210+Redis Unauthorized Access Installation root@kitploit: pip install -r requirements.txt Usage root@kitploit: usage: SSRFX.py -h --url URL --threads THREADS --app APP --network NETWORK --type TYPE --vulapp VULAPP --lhost LHOST --lport LPORT --rhost RHOST --rport RPORT SSRF Explotion...

Metasploit-Red-Pentest-Lab

Metasploit-Red-Pentest-Lab Lab exercise involving exploitation of the vsftpd 2.3.4 vulnerability CVE-2011-2523 on Metasploitable 2 and post-exploitation steps...

cve-2014-4014-privesc

https://duasynt.com/blog/cve-2014-4014-local-privilege-escalation...

Mitel-MiCollab-Auth-Bypass_CVE-2024-41713

CVE-2024-41713 Mitel MiCollab Authentication Bypass to Arbitrary File Read See our blog post for technical details root@kitploit: / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchtowr-vs-MiCollab2024-12-05.py Mitel MiCollab...

CVE-2020-0688

This repository does not have a README...

CVE-2013-2006

CVE-2013-2006 Versión: https://github.com/openstack/keystone/blob/d43e2a51a1ed7adbed3c5ddf001d46bc4a824ae8...

Langflow-RCE-CVE-2025-3248

CVE-2025-3248 — Langflow Unauthenticated RCE PoC A clean, tested proof-of-concept for CVE-2025-3248 , an unauthenticated remote code execution vulnerability in Langflow versions prior to 1.3.0. What is CVE-2025-3248? Langflow's /api/v1/validate/code endpoint accepts Python code for static...

CVE-2022-41040

This repository does not have a README...

POC-CVE-2018-7600

POC-CVE-2018-7600 Drupal vulnerable a CVE-2018-7600 Drupalgeddon2 Scanner CVE-2018-7600 Escáner sencillo en Python para detectar servidores Drupal potencialmente vulnerables a CVE-2018-7600 Drupalgeddon2. El script no explota ni abre shell , únicamente: 1. Envía una petición al flujo user/passwor...

CVE-2017-7504-poc

Poc de vulnerabilidad de deserialización de JBoss 4.x JBossMQ JMS -h ver el modo de uso...

CVE-2026-86814

creationtimestamp| type| source ---|---|--- 2026-09-19 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117296530943304712 2026-09-19 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvu5ysa5xr2p 2026-09-19 15:03:41+00:00| seen|...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

spill

Spill Utility to quickly scan over a signle IP / CIDR to search for OpenPrinting CVE 2024-47176 on UDP 631 This utility is quick and ugly - but could be useful to some people. Exploit has been left out purposefully as this is more designed to scan and provide awareness to users. Build Project...