Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Exploitation of Remote Code Execution Vulnerability CVE-2024-7954 Software Vulnerability Testing Project Submitted by: Shivansh Kuntal Overview This project demonstrates the exploitation of CVE-2024-7954 , a critical Remote Code Execution RCE vulnerability affecting SPIP CMS through its porteplum...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

CVE-2024-4577

CVE-2024-4577 Vulnerability Checker This script is designed to check for the vulnerability described by CVE-2024-4577, which involves exploiting certain PHP configurations to execute arbitrary code remotely. It sends a POST request to specified endpoints on a list of domains and checks if the...

CVE-2016-16113-POC

Get RCE - Bludit CMS Exploit root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| An automated exploitation tool that combines CVE-2019-17240 Authentication Bypass and CVE-2019-16113 Arbitrary File Upload to achieve remote code...

CVE-2026-78625

Okta Access Gateway is affected by an insufficient validation vulnerability in its dashboard site configuration . The product fails to sanitize dashboard application label values before writing them into generated PHP configuration files . Since the generated file is automatically included during...

EUVD-2026-74173

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process...

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash Introduction ISPConfig versions = 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records parameter in the /admin/languageedit.php endpoint. A malicious authenticated admin user can exploit this to...

bantam

Bantam 一个高级的 PHP 后门管理工具，具有轻量级的服务端占用、多线程通信以及先进的负载生成和混淆工具。支持端到端加密，每个请求使用唯一加密密钥，并采用负载流式传输以绕过 WAF、IDS、SIEM 系统。它融合了多种负载随机化和混淆技术，在无法加密时有助于避免检测。Bantam 是 Linux PHP 后期利用提权的理想工具，可轻松上传枚举脚本。它还具备插件系统，便于向 UI 添加脚本和功能。该工具使用 C 编写，可在 Windows 及 Linux（通过 Wine）上运行。 功能 端到端请求与响应加密 - 加密流程 使用 openssl 或 mcrypt 对请求和响应数据进行...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

CVE-2007-3831

CVE-2007-3831 PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at :...

wp2shell-scan

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-2026-63030 wp2shell, a pre-authenticated remote code execution vulnerability in WordPress core Features Two non-destructive detection methods: --check-type time-based SLEEP timing and --check-type error-based TRUE/FALSE/broken...

pcc

PHP 安全配置检查器 检查当前 PHP 配置是否存在潜在安全漏洞。 只需通过 Web 服务器访问此文件或在 CLI 上运行即可。 作者 该软件由 Ben Fuhrmannek 编写，来自 SektionEins GmbH，旨在自动化 php.ini 检查并将更多时间用于愉快的工作。 理念 单个文件，易于分发 对每个安全相关的 ini 条目进行简单测试 一些其他测试——不过不太复杂 兼容 PHP = 8.1 没有复杂/过度设计的代码，例如没有类/接口、测试框架、库等 - 这应该能让初学者一目了然地了解此工具的工作原理和功能！ 没有（或极少）依赖 使用 / 安装 CLI ：只需调用 php...

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and shellcode for Citrix VPX 13.1-48.47. For the full writeup, click here. Usage NASM is required to build the shellcode. root@kitploit: $ sudo apt install nasm The included shellcode will download and run a shell script from a remote https...

CVE-2026-3300

CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...

CVE-2025-49113

📧 Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization CVE-2025-49113 🔍 Writeup A critical post-authentication Remote Code Execution vulnerability was discovered in Roundcube versions ≤ 1.6.10, caused by insecure PHP object deserialization. This severe flaw has silently persisted in th...

discuz-ml-rce

discuz-ml-rce Affected systems and versions: Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 Vulnerability cause: The Discuz!ML system does not filter the language parameter content received by l in the cookie, leading to string concatenation, thereby executing PHP code. The cookie field will contain an...

CVE-2025-66034-htb-ctf

CVE-2025-66034-htb-ctf VariaType Variable Font Generator Exploit This repository contains a specialized exploit for the VariaType machine on Hack The Box. The exploit leverages a vulnerability in how the fontTools library or the web application handles .designspace XML files and metadata...

php-mt_rand

This repository does not have a README...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. This was the first publicly-released exploit for CVE-2009-1151. Syntax root@kitploit: $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo root@kitploit...