Lucene search
+L

39522 matches found

Kitploit
Kitploit
•added 2026/09/28 4:53 a.m.•13 views

PoCForCVE-2015-1528

This PoC is divided into three Parts, the folder mediaserver help to inject code into mediaserver from a normal application. the folder surfaceflinger help to inject code to surfaceflinger after you got mediaserver permission. the folder systemserver help to inject code to systemserver after you...

9.3CVSS5.9AI score0.03033EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 4:17 a.m.•9 views

RemoteTLSCallbackInjection

Maldev Academy - RemoteTLSCallbackInjection Quick Links Maldev Academy Home Maldev Academy Syllabus Related Maldev Academy Modules New Module 34: TLS Callbacks For Anti-Debugging New Module 35: Threadless Injection Overview This method utilizes TLS callbacks to execute a payload without spawning...

6.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/28 4:17 a.m.•11 views

CVE-2020-17496

CVE-2020-17496 root@kitploit: POST /ajax/render/widgettabbedcontainertabpanel?XDEBUGSESSIONSTART=phpstorm HTTP/1.1 Host: localhost User-Agent: curl/7.54.0 Accept: / Content-Length: 100 Content-Type: application/x-www-form-urlencoded subWidgets0template=widgetphp&subWidgets0configcode=echo...

9.8CVSS9AI score0.8774EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 3:11 a.m.•16 views

SafeLine

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 2:58 a.m.•11 views

CVE-2022-22947-POC

CVE-2022-22947-POC CVE-2022-22947 batch detection script. The echo command is not regex-filtered. Please use it for now; I will update later. Place url.txt in the script directory. Directly run: python 脚本.py Demo: After the scan is complete, a success.txt file will be generated. This script will...

10CVSS8AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
•added 2026/09/28 2:33 a.m.•14 views

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC Description This is my PoC for the CVE-2023-30253 Dolibarr 17.0.0 PHP Code Injection, when the CMS Website plugin core is enabled, an authenticated attacker can obtain remote command execution via php code injection bypassing the application restrictions...

8.8CVSS8.3AI score0.82094EPSS
SaveExploits16
Kitploit
Kitploit
•added 2026/09/28 2:16 a.m.•148 views

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 1:59 a.m.•14 views

Research_Successful_Errors

Successful Errors: New Code Injection and SSTI Techniques !NOTE This is the second version of the whitepaper based on the results I presented before releasing SSTImap version 1.3.1. Further improvements would be adapted for this format as version 1.2 of the research at a later date. Payloads...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 1:39 a.m.•11 views

injectAmsiBypass

Cobalt Strike BOF - Inject AMSI Bypass Cobalt Strike Beacon Object File BOF that bypasses AMSI in a remote process with code injection. Running inject-amsiBypass BOF from CobaltStrike What does this do? 1. Use supplied PID argument to get a handle on the remote process root@kitploit: hProc =...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 1:28 a.m.•18 views

cave_miner

CAVE MINER This tools search for code cave in binaries Elf, Mach-o, Pe, and inject code in them. Installation root@kitploit: pip install cave-miner Usage Exemple...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 1:13 a.m.•8 views

CVE-2022-25062

CVE-2022-25062 This script exploits a vulnerability IoF in the TPLink WR840N router, using a field for injecting code in the module DNS...

7.5CVSS6.8AI score0.03503EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 11:52 p.m.•6 views

CVE-2023-46818-python-exploit

CVE-2023-46818 exploit This is a python version of the original php script for the vulnerability affecting ispconfig 3.2.11 and previous versions. Original PHP source: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html This proof-of-concept is intended for...

7.2CVSS7.8AI score0.15732EPSS
SaveExploits14
Kitploit
Kitploit
•added 2026/09/27 11:37 p.m.•14 views

PHPUnit_eval-stdin_RCE

PHPUniteval-stdinRCE CVE-2017-9841 PHPUniteval-stdinphp Remote Code Execution A code injection vulnerability in PHPUnit, a PHP unit testing framework which part of the Mailchimp , Mailchimp E-Commerce moduels in Drupal The vulnerability within the /phpunit/src/Util/PHP/eval-stdin.php file through...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/27 11:13 p.m.•12 views

CVE-2023-33733

CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl;dr This write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an...

7.8CVSS7.9AI score0.02123EPSS
SaveExploits6
Kitploit
Kitploit
•added 2026/09/27 10:38 p.m.•19 views

SSTImap

SSTImap This project is based on Tplmap. SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive...

6AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/27 10:12 p.m.•11 views

DNCI

DNCI - Dot Net Code Injector DNCI allows the injection of .Net code .exe or .dll remotely in unmanaged processes in windows. 1. Project Structure The project is structured in: DNCI.Injector.Library - Injection library. Contains all injection components and logic; DNCI.Injector.Runner - Command...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 10:11 p.m.•8 views

CVE-2023-0297

pyloadCVE-2023-0297poc A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. use Usage of CVE-2023-0297poc.exe: root@kitploit: -f string fileName:IP.txt -u string example:http://127.0.0.1:8080...

9.8CVSS8.4AI score0.95915EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/27 9:18 p.m.•9 views

CVE-2017-12615

CVE-2017-12615...

8.1CVSS7.8AI score0.99641EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/27 9:15 p.m.•16 views

cromos

Cromos Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application and more cromos create executable files to force installation via PowerShell for example, and also upload files to dropbox to host the malicious files...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 8:30 p.m.•14 views

CVE-2023-27372

CVE-2023-27372 Exploit Exploit for CVE-2023-27372 , an unauthenticated Remote Code Execution vulnerability in the SPIP CMS affecting versions prior to 4.2.1. ⚠️ For educational purposes only. Use exclusively on systems you own or have explicit written permission to test. Unauthorized use is...

9.8CVSS8.5AI score0.99682EPSS
SaveExploits23
Rows per page
Query Builder