2995 matches found
goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-
Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A recent bug in Goahead Webserver was discovered by William Bowling which leads to RCE on the exploited server. The issue exists prior to version 5.1.5 which, according to Shodan covers around 2.8mio servers on the internet. A CVS is available n...
Letta-CVE-2025-51482-RCE
Letta-CVE-2025-51482-RCE Vulnerability Cause Analysis 1. Lack of Code Security Inspection Problem: The system does not perform any security inspection on user-provided source code. Evidence: generateexecutionscript method directly inserts user code into the execution script: root@kitploit: code +...
Shocker-TJNULL-OSCP-
HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...
CVE-2026-24061
CVE-2026-24061 Exploit de RCE en Telnet - Por SafeBreach Labs Este script explota la vulnerabilidad CVE-2026-24061 en servidores Telnet mediante una variable de entorno USER malformada. Uso Ejecute el script con un host de destino: root@kitploit: python telnetrce.py -p Argumentos host: Direcciรณn ...
lk_scraper
LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...
CVE-2024-48990-Automatic-Exploit
CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...
credactor
Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...
fix-CVE-2020-15228
Arreglar CVE-2020-15228 set-env, add-path en Github-Actions Este script cambia lรญneas en tu archivo de acciรณn de github. Le das un nombre de directorio, y busca todos los archivos con la extensiรณn ".sh" o ".yml". Reconoce estas lรญneas: root@kitploit: echo ::set-env name=FOOBAR::$FOOBAR echo...
CVE-2022-22947
Entorno RCE de Spring Cloud Gateway CVE-2022-22947 CVE-2022-22947 fue identificado en el jar del servidor Spring Cloud Gateway. Despuรฉs de compilar la aplicaciรณn, deberรญa poder ver las rutas existentes visitando: http://127.0.0.1:9000/actuator/gateway/routes Compilar root@kitploit: $ mvn package...
looney-tunables-CVE-2023-4911
PoC de CVE-2023-4911 Looney Tunables Este es un PoC de CVE-2023-4911 tambiรฉn conocido como "Looney Tunables" que explota un error en la funciรณn de anรกlisis de la variable de entorno GLIBCTUNABLES del cargador dinรกmico de glibc, parsetunables. Comenzando Ejecutando el programa Podemos comprobar si...
CVE-2021-4034
Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalation For educational and authorized security research purposes only. Original Exploit Authors @arthepsy Vulnerability Description A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a...
CVE-2024-48990
PoC for CVE-2024-48990 CVE-2024-48990 is a local privilege escalation vulnerability found in the needrestart utility. The vuln exists in versions prior to 3.8. The service, which runs as root during events like package installations, insecurely scans all running processes. When it finds a Python...
Out-FINcodedCommand
Out-FINcodedCommand v1.0 Introduction Out-FINcodedCommand is a PowerShell v2.0+ compatible PowerShell POC script designed to highlight several obfuscation techniques used by FIN threat actors. The primary obfuscation techniques highlighted in this tool are: 1. cmd.exe's variable char/string...
CVE-2026-24061
CVE-2026-24061-PoC โ Esta herramienta se crea รบnicamente con fines educativos. El uso no autorizado fuera de entornos controlados estรก estrictamente prohibido. CVE-2026-24061 es una vulnerabilidad crรญtica CVSS 9.8 en telnetd de GNU Inetutils versiones 1.9.3โ2.7 que permite a un atacante remoto...
telnet_scan
Escรกner de Vulnerabilidades Telnet CVE-2026-24061 & CVE-2026-32746 Una herramienta de evaluaciรณn de seguridad basada en Python que detecta y cuando corresponde explota dos vulnerabilidades crรญticas en GNU InetUtils telnetd: CVE-2026-24061 โ Bypass de autenticaciรณn mediante inyecciรณn de la variabl...
CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera
๐ค Show your support - give a โญ๏ธ if you liked the content | SHARE on Twitter | Follow me on CVE-2022-0337 System environment variables leak on Google Chrome, Microsoft Edge and Opera ๐ Description Successful exploitation of this vulnerability can lead to the leak of user's secrets stored inside a...
bash-apocalypse
Bash Apocalypse Automated exploitation toolkit for CVE-2014-6271 Shellshock A complete security research project demonstrating the Shellshock vulnerability that affected millions of servers in 2014. Includes automated scanning, exploitation capabilities, and defensive recommendations. Demo What i...
CVE-2014-6271-Shellshock-
Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demonstration Lab Shellshock CVE-2014-6271 is one of the most influential remote code execution vulnerabilities ever discovered. The flaw affects Bash and allows attackers to execute arbitrary commands simply by injecting crafted payloads in...
CVE-2026-11115-Database-Connection-String-Injection-via-Env-Variable
CVE-2026-11115 โ Database Connection String Injection via Env Variable Program Code Python root@kitploit: dbconnector.py - Constructs DB connection string from environment import os, psycopg2 def connect: Reads DBURL; attacker can override via environment injection if they control an env var dbur...
CVE-2021-4034-PwnKit-
CVE-2021-4034 PwnKit - Analysis and Exploitation This repository contains the source code to demonstrate the exploitation of the CVE-2021-4034 vulnerability, also known as PwnKit , discovered in pkexec part of the Polkit package. This flaw allows local privilege escalation to root through the use...