CVE-2022-30333

A proof of concept for CVE-2022-30333 - a path traversal vulnerability in unRAR versions prior to 6.11. I created this as a demonstration of the exploit for an AttackerKB writeup, and hope to incorporate it in a Metasploit Module soon! Basically, you provide a target including path traversal and...

CVE-2024-36401-WoodpeckerPlugin

CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...

Log4Shell-obfuscated-payloads-generator

Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator can generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection. The design idea of ​​Log4Shell-obfuscated-payloads-generator Installation root@kitploit: git...

CVE-2018-8039

This repository does not have a README...

CVE-2018-10933

Este repositorio no tiene un README...

poc-for-CVE-2020-13519-still-under-construction-

poc-for-CVE-2020-13519-still-under-construction- poc for CVE-2020-13519still under construction. needs refining , testing , tunning... ExploitEOP will be based on this cool blogpost. https://idafchev.github.io/blog/wrmsr/...

jenkinsci__workflow-multibranch-plugin_CVE-2022-25175_706-vd43c65dec013

Pipeline: Multibranch Introduction Enhances Pipeline plugin to handle branches better by automatically grouping builds from different branches. Automatically creates a new Jenkins job whenever a new branch is pushed to a source code repository. Other plugins can define various branch types, e.g. ...

jetty_9.4.31_CVE-2023-26048

Eclipse Jetty Canonical Repository This is the canonical repository for the Jetty project, feel free to fork and contribute now! Submitting a patch or pull request? Make sure you have an Eclipse Contributor Agreement ECA on file. eclipse.org/legal/ecafaq Project description Jetty is a lightweight...

DirtyPIPE-CVE-2022-0847

CVE-2022-0847 POC Fuente: https://www.exploit-db.com/exploits/50808 1. Compilación En Linux, gcc -o dirty dirty.c compila el programa POC. 2. Uso ./dirty SUID ejecuta el programa. Donde SUID es la ruta del programa que tiene SUID. Normalmente se puede usar /usr/bin/passwd, es decir, ejecutar...

CVE-2021-41773-RCE

CVE-2021-41773-RCE...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Módulo de Metasploit Módulo de Metasploit de inyección de comandos del sistema operativo en InfoBlox Network Automation Producto: Network Automation root@kitploit: NetMRI Switch Port Manager Automation Change Manager Security Device Controller Proveedor: root@kitploit:...

SIGRed

CVE-2020-1350 AKA SIGRed v0.30 Summary: A Zeek package for detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 AKA SIGRed - CVE Score of 10.0 References:...

CVE-2019-5418

CVE-2019-5418 sandbox https://groups.google.com/forum/!msg/rubyonrails-security/zRNVOUhKHrg/GmmcVXcmAAAJ inicializar root@kitploit: $ git clone https://github.com/takeokunn/CVE-2019-5418 $ cd https://github.com/takeokunn/CVE-2019-5418 $ docker-compose up Uso root@kitploit: $ curl localhost/sandbo...

platform_frameworks_base_CVE-2023-21281

This repository does not have a README...

CVE-2025-55184

This repository does not have a README...

react2shell-scanner

react2shell-scanner Una herramienta de línea de comandos para detectar CVE-2025-55182 y CVE-2025-66478 en aplicaciones Next.js que utilizan React Server Components. Para conocer los detalles técnicos de la vulnerabilidad y la metodología de detección, consulta nuestra entrada del blog:...

CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec Watch the ✨ YouTube Video...

CVE-2017-18019

CVE-2017-18019 Under Construction : Please come back later...

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass two method given to get flag's content: 1. copy it from host into container's mounted dir; 2. use reverse shell to get it;...

openSSL_1.0.1g_CVE-2014-3507

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...