cve-2017-9805.py

CVE-2017-9805.py 1. Better Exploit Code For CVE 2017 9805 apache struts 2. Should be mostly error proof Why Recode? Found that most of the exploit code online simply used string concatenation to insert user supplied commands and insert into an XML string. This isnt very reliable as XML requires...

CVE-2025-59287-WSUS-2

CVE-2025-59287 ⚠ تم إنشاء هذه الأداة لأغراض تعليمية فقط. الاستخدام غير المصرح به خارج البيئات الخاضعة للتحكم ممنوع منعًا باتًا. CVE-2025-59287 هي ثغرة تنفيذ تعليمات برمجية عن بُعد حرجة في خدمة تحديث خوادم Windows WSUS من مايكروسوفت. تنبع من إلغاء تسلسل غير آمن للبيانات داخل مكونات WSUS، مما يسمح...

CVE-2017-7269-exploit

Modified from https://github.com/edwardz246003/IISexploit.git Usage root@kitploit: -h : Select host default 127.0.0.1 -p : Select port default 80 Append command at the end default regedit, currently this script only supports up to 8 characters...

CVE-2025-32432

CraftCMS CVE-2025-32432 Exploit By Chirag Artani Overview This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution RCE vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 is a security vulnerability found in Cacti, a network monitoring and management software. This vulnerability allows an attacker to remotely exploit the system without authentication by sending a specially crafted HTTP request. By taking advantage of this vulnerabilit...

Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Following Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE The Circulating coding poc: The exploit has been uploaded asexp.py The official Spring patch is also in active production Patch Links in...

php_filter_chain_generator

مولّد سلسلة فلاتر PHP أداة سطر أوامر لتوليد سلسلة فلاتر PHP؛ احصل على RCE دون رفع ملف إذا كنت تتحكم بالكامل في المعامل المُمرَّر إلى require أو include في PHP! الاستخدام المساعدة root@kitploit: $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain CHAIN...

nmap-log4shell

سكربت NSE من Nmap لاكتشاف Apache Log4j RCE CVE-2021-44228 script nmap-log4shell هو سكربت NSE لاكتشاف ثغرة Apache Log4j RCE CVE-2021-44228 عبر الشبكة. يستطيع السكربت حقن حمولة استغلال log4shell عبر ترويسات HTTP الافتراضي أو عبر مقبس TCP/UDP. الثغرة CVE-2021-44228 هي ثغرة تنفيذ برمجي عن بُعد RCE في...

CVE-2021-40845

CVE-2021-40845 I. VULNERABILITY AlphaWeb XE - Authenticated Insecure File Upload leading to RCE II. CVE REFERENCE CVE-2021-40845 III. VENDOR https://www.zenitel.com/ IV. DESCRIPTION The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file uplo...

CVE-2026-24061

Telnet Vulnerability Scanner & Exploiter This Python script main.py is a multi-threaded tool designed to scan a list of target IPs/hostnames and attempt to exploit a specific vulnerability over Telnet. !WARNING This tool is intended for educational purposes and authorized penetration testing only...

gogsownz

GogsOwnz GogsOwnz is a simple script to gain administrator rights and RCE on a Gogs/Gitea server. Exploit vulnerabilities in Gogs/Gitea, including CVE-2018-18925 , CVE-2018-20303. Legal Disclaimer This script is offered as is. No warranty, use on your own, please obey the law. Typical Usage -...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE A python3 script for the CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE requires cgi-bin to be enabled Getting Started Executing program LFI root@kitploit: python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE root@kitploit: python3...

text4shell-exploit

text4shell-exploit A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions 1.10. This exploit targets vulnerable Java applications that use the StringSubstitutor class with interpolation...

laravel-poc-CVE-2018-15133

Laravel Remote Code Execution when APPKEY is leaked PoC CVE-2018-15133 This repository contains a simple Laravel 5.6.29 application on PHP 7.2.10 with one basic noop route added in routes/web.php see Dockerfile and Proof of Concept exploit cve-2018-15133.php for CVE-2018-15133 that should...

CVE-2020-14883EXP

CVE-2020-14883EXP WebLogic 10.3.6.0.0 ;12.1.3.0.0 ;12.2.1.3.0; 12.2.1.4.0 ;14.1.1.0.0 के सत्यापन और उपयोग के लिए, कृपया अवैध उद्देश्यों के लिए इसका उपयोग न करें। सत्यापन शुरू करने के लिए IP+पोर्ट दर्ज करें उदा. 127.0.0.1:7001 रिमोट xml कमांड निष्पादन का समर्थन करता है 10.3.6.0.0 के अलावा अन्य...

CVE-2024-23738

CVE-2024-23738 मैकओएस पर पोस्टमैन 10.22 तक की एक समस्या दूरस्थ हमलावर को RunAsNode और enableNodeClilnspectArguments सेटिंग्स के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। इलेक्ट्रॉन में कमजोरियों की खोज की प्रक्रिया को स्वचालित करने के लिए एक उपकरण है:...

CVE-2021-26084_PoC

CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

shepard

SHEPARD BITS यह एक स्थायित्व उपकरण है जो Windows Background Intelligent Transfer Service BITS का उपयोग करता है। कार्यक्षमता फ़ाइल डाउनलोड, फ़ाइल एक्सफ़िल्ट्रेशन, फ़ाइल डाउनलोड + स्थायी निष्पादन उपयोग shepard.exe को व्यवस्थापक के रूप में निम्नलिखित कमांड लाइन तर्कों के साथ चलाएँ: -d : आपकी पसंद के...

shepard

SHEPARD BITS This is a persistance tool using Windows Background Intelligent Transfer Service BITS. Functionality File Download, File Exfiltration, File Download + Persistent Execution Usage Run shepard.exe as Administrator with the following command line arguments: -d : regular file download to ...