Lucene search
+L

38 matches found

Kitploit
Kitploit
added 2026/09/22 1:06 a.m.14 views

CVE-2023-43364-Exploit-CVE

CVE-2023-43364-Exploit-CVE This is a python script to exploit Searchor 2.4.0 - the eval function was implemented insecurely and can be exploited for RCE. This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another...

9.8CVSS8.2AI score0.02565EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 6:52 p.m.9 views

htb-wifinetictwo-exploit

CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...

9CVSS8AI score0.27075EPSS
SaveExploits10
GithubExploit
GithubExploit
added 2026/09/21 5:01 p.m.13 views

writeups

Writeups & Pentest Notes Personal knowledge base documenting...

9.9CVSS0.03824EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/21 2:03 a.m.5 views

Variatype.htb-CVE-2025-66034

Hackthebox Season 10 - Variatype This script will get you initial access. First, Install required modules using pip pip3 install -r requirements.txt Usage python3 exploit.py 'id' or python3 exploit.py 'echo BASE64ENCODEDREVSHELL | base64 -d | bash'...

9.8CVSS7.5AI score0.00547EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/20 10:25 p.m.6 views

cctv

CCTV — HackTheBox Walkthrough 플랫폼: HackTheBox | OS: Linux 공격 체인 CVE-2024-51482를 통한 ZoneMinder SQL 인젝션으로 데이터베이스에서 bcrypt 해시를 덤프한다. hashcat으로 크래킹하면 SSH 접근 권한을 얻는다. 포트 포워딩으로 노출된 내부 motionEye 인스턴스는 CVE-2025-60787에 취약하다 — 루트 셸을 제공한다. 열거 root@kitploit: nmap -sV -sC 10.129.53.160 -Pn 22/tcp open ssh...

9.9CVSS7.3AI score0.3661EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/20 6:26 p.m.10 views

onetwoseven-writeup

HTB OneTwoSeven — Полное прохождение Полное сквозное прохождение OneTwoSeven — вышедшей из ротации HackTheBox Linux-машины. Полная цепочка: детерминированная генерация учётных данных → выход из SFTP-chroot через симлинки → восстановление swap-файла vim → проброс SSH-портов к экранированной...

7.8CVSS7.4AI score0.28058EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/20 3:53 p.m.11 views

CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP

README Hackthebox Machine: CCTV Application: ZoneMinder Description Performing multiple time-based blind injections for the same character and selecting the most frequent result significantly reduces errors and improves reliability, though it is time-consuming...

9.9CVSS8.3AI score0.3661EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/20 2:17 a.m.6 views

Interpreter-HackTheBox

Interpreter — HackTheBox 플랫폼: HackTheBox OS: Linux 상태: Retired — 전체 풀이 공개됨. 전체 풀이: l3dsec.com/walkthroughs/interpreter-htb 공격 체인 root@kitploit: Nmap → Mirth Connect 4.4.0 80/443 → CVE-2023-43208 인증 없는 Java 역직렬화 RCE → mirth로 셸 획득 → mirth.properties → MySQL 자격 증명 → MySQL → sedric PBKDF2 해시 → hashca...

9.8CVSS8.7AI score0.82708EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/18 8:03 p.m.8 views

CVE-2014-0160-HeartBleed

This is the exploit for CVE-2014-0160 from exploitdb. It did not work for me on python3 while solving Valentine on hackthebox, so I have made the necessary changes. I am not the original author of this code...

7.5CVSS7.3AI score0.99999EPSS
SaveExploits95
Kitploit
Kitploit
added 2026/09/18 2:59 p.m.8 views

TwoMillion-Machine-Writeup

О машине TwoMillion — это лёгкая Linux-машина уровня Easy, выпущенная в честь достижения 2 миллионов пользователей на HackTheBox. Машина содержит старую версию платформы HackTheBox со старым взламываемым инвайт-кодом. После взлома инвайт-кода можно создать учётную запись на платформе. Эта учётная...

7.8CVSS7AI score0.0788EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/18 3:43 a.m.57 views

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

5.8AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/18 12:53 a.m.8 views

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...

7.8CVSS7.5AI score0.0788EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/17 5:37 p.m.11 views

htb-facts

HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...

9.4CVSS6AI score0.00616EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/17 3:53 a.m.10 views

HackTheBox-Facts

HTB Facts — Full Writeup Difficulty: Medium OS: Linux Tags: Web, MinIO, Camaleon CMS, Path Traversal, SSTI, Privilege Escalation Table of Contents 1. Reconnaissance 2. Web Enumeration — Port 80 3. MinIO Discovery — Port 54321 4. Camaleon CMS — Admin Access 5. Privilege Escalation to Admin Role 6...

7.7CVSS6.2AI score0.1456EPSS
SaveExploits11References3
Kitploit
Kitploit
added 2026/09/16 9:49 p.m.9 views

htb-ctf-walkthroughs

HTB CTF Walkthroughs Documented solutions for HackTheBox machines. Each walkthrough covers enumeration → exploitation → privilege escalation with commands, screenshots, and technical analysis. Structure root@kitploit: htb-ctf-/ ├── index.md Full walkthrough └── media/ Screenshots and supporting...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 11:51 p.m.13 views

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

10CVSS7.8AI score0.99723EPSS
SaveExploits33
GithubExploit
GithubExploit
added 2026/06/07 5:19 p.m.174 views

HackTheBox

HackTheBox — Writeups, Tooling & Exploitation Pipelines A wor...

10CVSS7.6AI score0.99802EPSS
SaveExploits412
GithubExploit
GithubExploit
added 2026/05/30 5:59 a.m.176 views

HTB-Machines-writeups

somdv3 — HTB Writeups Personal HackTheBox writeup repository...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/23 11:49 a.m.178 views

Exploit for Improper Ownership Management in Debian Debian_Linux

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup —...

7.8CVSS7AI score0.0788EPSS
SaveExploits15
GithubExploit
GithubExploit
added 2026/04/16 4:40 p.m.382 views

ofensive-playbook

HackTheBox — Writeups Collection A collection of HackTheBox m...

9.9CVSS7.2AI score0.75197EPSS
SaveExploits29
Rows per page
Query Builder