go-exploit

go-exploit: Marco de Explotación en Go go-exploit es un marco de desarrollo de exploits para Go. El marco ayuda a los desarrolladores de exploits a crear exploits pequeños, autocontenidos, portátiles y consistentes. El marco fue desarrollado para simplificar el escaneo a gran escala, la explotaci...

GO-CVE-2011-4862

CVE-2011-4862 GO Exploit for CVE-2011-4862 Cross Compile with: GOOS=linux GOARCH=arm go build main.go...

CVE-2021-43858-MinIO

CVE-2021-43858 MinIO exploit MinIO User Privilege Escalation Vulnerability CVE-2021-43858 exp Run: go run exp.go ip port...

CVE-2025-27591_PoC

Proof-Of-Concept Usage 1. build root@kitploit: go build -o poc exploit.go 2. move the binary to the target machine https://github.com/user-attachments/assets/d5e3f8e7-ba05-42f8-a533-21179cd77177 References https://nvd.nist.gov/vuln/detail/CVE-2025-27591...

CVE-2023-35813

CVE-2023-35813 Exploit for CVE-2023-35813 example use: go run CVE-2023-35813.go https://example.com or go build CVE-2023-35813.go ./CVE-2023-35813 https://example.com Printscreen:...

CVE-2022-0847

CVE-2022-0847 The Dirty Pipe Vulnerability For educational purposes only root@kitploit: ┌──vagrant㉿kali- └─$ ls -al /etc/passwd -rw-r--r-- 1 root root 3124 Mar 8 08:47 /etc/passwd ┌──vagrant㉿kali- └─$ head -n 1 /etc/passwd root:x:0:0:root:/root:/usr/bin/zsh ┌──vagrant㉿kali- └─$ echo foo /etc/pass...

CVE-2025-32433-Remote-Shell

CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-32433 returning a remote bash shell. Heavily inspired by understanding of exploit derived from ProDefense's PoC for CVE-2025-32433. Running the Exploit root@kitploit: make exploit.exe is also made available for Windows machines by the...

CVE-2022-24715-go

CVE-2022-24715 The Icinga Web 2 exploit written in go. The original python code can be found in: https://packetstormsecurity.com/files/173516/Icinga-Web-2.10-Remote-Code-Execution.html...

bluebox

Bluebox work in progress A collection of exploits for different VoIP products. Thanks to the Go Exploit Framework. If you ended up here looking for a VoIP pentesting solution, check out Sippts sippts-gui in Kali or SIPVicious. This project is more focused on the exploitation phase. Install...

pwnkit-go

Pwnkit-go This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go Give it a try: root@kitploit: create a vulnerable vagrant machine $ make vm ... build the binary and scp it to the vagrant box $ make scp ssh onto the vagrant box $ make ssh The default user is "vagrant...

copy-fail-go

Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: This program is highly dangerous and experimental. Manual cleanup is required to clear the exploit. Use at your own risk! Technical Writeup original repo run check /usr/bin/su before run: root@kitploit: user@pc:$ hexdump -n 300 -x /usr/bin/su...

cve-2023-51467

Go-Exploit for CVE-2023-51467 This repository contains a go-exploit for Apache OFBiz CVE-2023-51467. The implementation contains target verification, a version scanner, and an in-memory Nashorn reverse shell as the payload requires the Java in use supports Nashorn. The weaponization process is...

cve-2018-11776-docker

Contenedor Docker y exploit PoC de CVE-2018-11776 escrito en Go Puedes construir tu propia imagen y ejecutarla: root@kitploit: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename O simplemente puedes usar la que creé con cariño para ti: root@kitploit: docker...

SSH-key-and-RCE-PoC-for-CVE-2021-41773

SSH Key and RCE PoC for CVE-2021-41773 This repository contains a Proof-of-Concept PoC for CVE-2021-41773. This CVE exposes a Local File Inclusion LFI and Remote Code Execution RCE vulnerability. Installation Ensure you have Go version 1.23.0 installed. Build the exploit binary with the following...

CVE-2019-8449

CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage root@kitploit: go run main.go -t -c Examples root@kitploit: go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t...

cve-2017-7921-golang

Hikvision bypass exploit Requirements 1. github.com/levigross/grequests 2. github.com/msterzhang/gpool 3. golang.org/x/net 4. github.com/go-vgo/robotgo Build root@kitploit: git clone https://github.com/MisakaMikato/cve-2017-7921-golang.git cd cve-2017-7921-golang/src/cve-2017-7921-golang go build...

CVE-2022-0492-Container-Escape

CVE-2022-0492-Container-Escape CVE-2022-0492-Container-Escape Implemented in Go Reference links: https://github.com/chenaotian/CVE-2022-0492 https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/...

cve-2023-25194

Apache Druid CVE-2023-25194 CVE-2023-25194 is a deserialization vulnerability affecting Apache Kafka. This go-exploit demonstrates exploiting CVE-2023-25194 against Apache Druid using Kafka. This type of attack typically requires an LDAP JNDI attacker infrastructure that is normally spread across...

cve-2025-55182

CVE-2025-55182: Exploitation Artifacts An export of a small subset of the VulnCheck Initial Access Intelligence artifacts for the CVE-2025-55182 React2Shell vulnerability. Some of the teams observations on these artifacts can be read in the blog post. Index ./inmem-webshell - An in-memory webshel...