68 matches found
CVE-2020-0796
CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...
kassandra_x33fcon_2026
kassandrax33fcon2026 This repository contains the PoC tool presented at x33fcon 2026, along with the associated presentation slides. The content is made available for research and educational purposes...
CVE-2015-1635
️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...
ysoserial.net
Una herramienta de prueba de concepto para generar payloads que explotan la deserialización insegura de objetos .NET. Descripción ysoserial.net es una colección de utilidades y "cadenas de gadgets" de programación orientada a propiedades descubiertas en bibliotecas .NET comunes que pueden, bajo l...
wp2shell
wp2shell CVE-2026-63030 + CVE-2026-60137+poc This vulnerability is not very easy to exploit. Database command execution command: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Reference: https://github.com/Icex0/wp2shell-poc However, there is one issue: adding the account password...
cve-2021-44228
CVE-2021-44228 https://nvd.nist.gov/vuln/detail/CVE-2021-44228 log4j.java - modification of this PoC https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce to run a bunch of payloads from JNDIExploit. jndi.pcap - a PCAP of each of these payloads being ran. snort.rules - Snort rules to...
Struts2-048
Struts2-048 CVE-2017-9791 Author: DragonEgg root@kitploit: def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...
CVE-2024-23897
Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments root@kitploit: usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PRO...
CVE-2022-26134
CVE-2022-26134 poc Declaration: This POC is for learning purposes only. Any illegal operations are prohibited. If used for malicious destruction, it has nothing to do with the author!!! Usage Single URL verification root@kitploit: python CVE-2022-26134.py target url Batch URL verification...
CVE-2026-10523-Ivanti-sentry
CVE-2026-10523 - Ivanti Sentry RCE Detection Tool A comprehensive proof-of-concept detection tool for testing Ivanti Sentry vulnerabilities related to authentication bypass and remote code execution. This tool identifies systems vulnerable to CVE-2026-10520 and CVE-2026-10523. Overview This proje...
CVE-2024-7928
CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. How to Use FOFA : app="FASTADMIN" Install the script requirements: root@kitploit: pip install -r requirements.txt Single Target: root@kitploit: python CVE-2024-7928.py -u https://target:9090 Bulk...
twoplustwo
twoplustwo Implementing CVE-2020-0601...
CVE-2021-26295--
CVE-2021-26295-- CVE-2021-26295-POC Use DNSlog for vulnerability verification of CVE-2021-26295. Poc usage: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot properly generate the payload exp: python exp.py https://baidu.com then enter th...
cve-2020-2555
CVE-2020-2555 Ejecutar Main.java generará payload.ser en el directorio actual; este payload se puede enviar al servidor de destino mediante el protocolo t3...
CVE-2022-4616-POC
CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...
CVE-2024-27316
CVE-2024-27316 I decided to call this vulnerability specifically "CVE-2024-27316" since I have tested it against this vulnerability. The underlying flaw effects other CVEs so I thought I'd mention those with the hope that others could test and modify this PoC : This PoC currently only works again...
frida-android-libbinder
frida-android-libbinder Script PoC de Frida para visualizar el tráfico de libbinder en Android. Los siguientes enlaces fueron una gran fuente de inspiración y conocimiento: https://www.blackhat.com/docs/eu-14/materials/eu-14-Artenstein-Man-In-The-Binder-He-Who-Controls-IPC-Controls-The-Droid.pdf...
CVE-2021-20837
CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...
CVE-2024-7029
EN GenAvTechRCEExploit A PoC exploit for the CVE-2024-7029 vulnerability found in AvTech devices, allowing Remote Code Execution RCE. This tool can scan for vulnerable devices and execute commands on them interactively. Features Vulnerability Detection : Check if AvTech devices are vulnerable to...