ezviz_lan_rce

ezvizlanrce This repository contains the slides and PoC videos for the talk SADProtocol goes to Hollywood which was presented at DEF CON 31 Hardware Hacking Village. You can also find the docker image to build binaries that run on the camera and the proof of concept exploits for CVE-2023-34551 an...

ezviz_lan_rce

ezvizlanrce このリポジトリには、DEF CON 31 Hardware Hacking Village で発表されたトーク SADProtocol goes to Hollywood のスライドとPoC動画が含まれています。また、カメラ上で動作するバイナリをビルドするためのDockerイメージと、CVE-2023-34551およびCVE-2023-34552の概念実証エクスプロイトも見つけることができます。...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploitation d'une attaque de falsification de requête intersite CSRF pour créer un utilisateur privilégié via la fonctionnalité d'ajout d'utilisateurs de Webmin, puis obtenir un shell inversé via la fonctionnalité de processus en cours d'exécution...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

nginx-ui CVE Verification Environment This repository is for actually verifying two CVEs reported for nginx-ui Nginx's Web GUI management tool in a Docker environment. CVE-2026-42221 : Unauthenticated administrator account takeover CVE-2026-42238 : Command execution via unauthenticated backup...

Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

Spring4Shell Threat Sandbox CVE-2022-22965 Overview This walkthrough documents the completion of the Sandbox Challenge focused on CVE-2022-22965, commonly known as Spring4Shell — a critical CVSS 9.8/10 remote code execution vulnerability affecting specific versions of the Spring Java framework. T...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 Proof of concept Exploit RCE in Apache HugeGraph Server Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph Server. Usage 🛠 Exploit multiple targets ☣️ root@kitploit: python3 CVE-2024-27348.py -f targets.txt -c "command to execute"...

CVE-2026-30502-OpenKM-6.3.12-Reflected-XSS

🛡️ CVE-2026-30502 — Reflected XSS in OpenKM v6.3.12 Discovered & Reported by Dharmendra Kumar — Security Researcher Cybersecurity | Penetration Testing | Vulnerability Research | Responsible Disclosure 📌 Table of Contents Overview CVE Details Affected Product Vulnerability Description Root Cause...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk This script allows you to generate exploits for targeting CVE-2022-4510 Binwalk vulnerabilities. The exploits can be used for testing and demonstrations. The supported options include SSH, command execution, and reverse shell. Prerequisites Python 3.x Usage 1. Clone the...

CVE-2017-9101

PlaySMS 1.4 authenticated RCE Simple method of performing remote code execution through the Phonebook CSV upload issue as described on ExploitDB. Either run a single command: root@kitploit: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Canary Exploit for Parquet CVE-2025-30065 root@kitploit: -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / ...

CVE-2021-3129

CVE-2021-3129 PoC for CVE-2021-3129 Laravel For educational purposes only Test Set up the PoC environment root@kitploit: $ docker-compose build $ docker-compose up -d Confirm it works See http://localhost:8000/ and make sure the Laravel default page is shown. Exploit root@kitploit: $ docker-compo...

HTB-NanoCorp-CVE-2024-0670

CVE-2024-0670 - CheckMK Agent MSI Repair Privilege Escalation NanoCorp HTB This repository contains a PowerShell script used to exploit CVE-2024-0670 on the NanoCorp machine from Hack The Box. The vulnerability allows a low-privileged user to abuse the CheckMK Windows Agent MSI repair functionali...

Apache-Struts-0Day-Exploit

Exploit 0Day Apache Struts Vulnérabilité critique d'exécution de code à distance CVE-2018-11776 trouvée dans Apache Struts. Installation git clone https://github.com/LightC0der/Apache-Struts-0Day-Exploit/ Utilisation : python ApacheStruts.py URL : www.example.com/ Shell : "Commandes" p. ex. ls,...

CVE-2017-17562

CVE-2017-17562 RCE GoAhead 웹 서버 2.5 3.6.5 CVE-2017-17562용 독립형 Python 3 리버스 셸 익스플로잇으로, GoAhead 웹 서버 버전 2.5 3.6.5에서 작동합니다. 블로그 관련 글. Python 3.7에서 작성 및 테스트되었으며, POC 및 취약 환경을 기반으로 합니다. 일부 코드는 Metasploit 모듈에서 차용했습니다. 원본 POC는 여기에서 찾을 수 있습니다. 원본 POC 익스플로잇이 작동하지 않아서 이 도구를 작성했습니다. 그 이유는 원본에 익스플로잇할 CGI 모듈을...

CVE-2023-3519

CVE-2023-3519 This Nuclei template checks for the presence of the CVE-2023-3519 vulnerability in a target web server. Vulnerability CVE-2023-3519 is a vulnerability that allows unauthenticated remote code execution in the Citrix Application Delivery Controller ADC and Gateway appliances. An...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE dans Confluence Data Center et Server Cette vulnérabilité pourrait permettre à un attaquant de prendre le contrôle total d'un serveur Confluence vulnérable. Cela pourrait permettre à l'attaquant de voler des données, de modifier des données ou de perturber la disponibilité du...

CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

CVE-2024-23692-RCE-in-Rejetto-HFS

Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...