1300718 matches found
spring-webmvc5
spring-webmvc5 Fork of spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819 Maven Add the following to the dependencies section of your project's pom.xml: root@kitploit: io.github.jaloon spring-webmvc5 5.3.39.1...
cve-2024-4577
cve-2024-4577 poc Check for vulnerabilities python cve-2024-4577.py -u http://172.16.128.133 After a vulnerability is detected, you can use -c to execute a custom command python cve-2024-4577.py -u http://172.16.128.133 -c '?php system'whoami';'...
CVE-2026-63030
CVE-2026-63030...
MITM6-Kerberos-CNAME-Abuse
Kerberos Authentication Relay - CNAME Abuse Technique PoC Background This tool is the proof-of-concept for Kerberos CNAME Abuse Relay technique, based on the MITM6 tool. The research uncovered a flaw in Windows Kerberos client behavior: when a DNS CNAME record is returned, the client follows the...
CVE-2021-41773-Exploit
This repository does not have a README...
CVE-2026-18577
cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...
React2Shell-CVE-Lab
⚛️ React2Shell: CVE-2025-55182 Vulnerable Lab ⚠️ WARNING: INTENTIONALLY VULNERABLE APPLICATION This repository contains a Dockerized application specifically configured to be vulnerable to CVE-2025-55182 React2Shell. DO NOT deploy this container in a production environment or on a public server...
BadKernel
BadKernel full exploit for CVE-2016-6754BadKernel slide for syscan2016 shanghai "BadKernel --- exploit V8 with a typo"...
CVE-2022-26134
This repository does not have a README...
exploit-CVE-2018-15139
OpenEMR CVE-2018-15139 exploit OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...
shiro-cve-2010-3863
Apache Shiro Path Traversal CVE-2010-3863 Vulnerability Reproduction Local environment setup with Docker Open Yakit to capture packets Payload: /./admin/ Successful...
Havoc-C2-SSRF-to-RCE
Havoc-C2-SSRF-to-RCE This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework...
CVE-2018-3245
CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933...
CVE-2022-21661-PoC
CVE-2022-21661-PoC A Python PoC of CVE-2022-21661, inspired from z92g's Go PoC Installation root@kitploit: pip3 install -r requirements.txt Usage root@kitploit: usage: main.py -h -u URL -f FILE Identify CEV-2022-21661 in Wordpress instances. options: -h, --help show this help message and exit -u...
cve-2023-25813
Este repositorio no tiene un README...
CVE-2019-5420-PoC
CVE-2019-5420-PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Nice argparse stuff, not a bad PoC Usage root@kitploit: usage: script.py -h --appname APPNAME --cookie COOKIE --modify KEY...
CVE-2023-25690-POC
CVE 2023 25690 - Proof of Concept Published: 7 March 2023 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High Table of contents...
CveTest
CveTest Test case to replicate Node.JS V0.10.31 v8 backport CVE-2013-6668 crash. Test calls a SQL stored procedure "GetSomething" to retrieve data from a table "Table1" in "SQLDB" database. Crash occurs when there is more than 52 rows returned and after making the same call several times...
dirtycow-vdso
0xdeadbeef PoC para Dirty COW CVE-2016-5195. Este PoC se basa en ptrace en lugar de /proc/self/mem para parchear vDSO. Tiene algunas ventajas sobre los PoCs que modifican binarios del sistema de archivos: no requiere un binario setuid bypass de SELinux escape de contenedores sin caída del kernel...