WSC2

WSC2 LAST/CURRENT VERSION: 0.1 Author: Arno0x0x - @Arno0x0x WSC2 is a PoC of using the WebSockets and a browser process to serve as a C2 communication channel between an agent, running on the target system, and a controller acting as the actuel C2 server. The tool is distributed under the terms o...

CVE-2020-0796

CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...

BlockchainC2

BlockchainC2 BlockchainC2 is a small POC server/agent to assess how the Blockchain specifically Ethereum's Smart Contract functionality can be used by an attacker for C2. Details regarding this application can be found here. Smart Contract The Smart Contract used within this POC is quite simple:...

CVE-2025-5777

. PoC root@kitploit: POST /p/u/doAuthentication.do HTTP/1.1 Host: 167.xxx.xx.x Content-Length: 5 login . The tool verfiy then 20 more requests to exploit. . Usage:- python CVE‑2025‑5777.py python CVE‑2025‑5777.py -l test.txt...

CVE-2021-44228-poc

CVE-2021-44228-poc CVE-2021-44228 POC / Example...

kassandra_x33fcon_2026

kassandrax33fcon2026 This repository contains the PoC tool presented at x33fcon 2026, along with the associated presentation slides. The content is made available for research and educational purposes...

CVE-2020-14750

CVE-2020-14750 PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882 To test if a system is vulnerable use: ./test-CVE-2020-14750 hostname:7001 At the moment, in this version, it only guarantees if the host is vulnerable. If the result is negative, it is not a guarantee that it is not...

cont-flood-poc

PoC for CVE-2023-45288 This is a proof-of-concept code for the CONTINUATION flood vulnerability found and documented by Bartek Nowotarski. The technical details are very well documented in his blog post here. While my focus was on the Go bug as documented by the researcher, this code should be...

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Ivanti Sentry RCE Detection Tool A comprehensive proof-of-concept detection tool for testing Ivanti Sentry vulnerabilities related to authentication bypass and remote code execution. This tool identifies systems vulnerable to CVE-2026-10520 and CVE-2026-10523. Overview This proje...

cve-2021-44228

CVE-2021-44228 https://nvd.nist.gov/vuln/detail/CVE-2021-44228 log4j.java - modification of this PoC https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce to run a bunch of payloads from JNDIExploit. jndi.pcap - a PCAP of each of these payloads being ran. snort.rules - Snort rules to...

Struts2-048

Struts2-048 CVE-2017-9791 Author: DragonEgg root@kitploit: def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...

CVE-2022-26134

CVE-2022-26134 poc Declaration: This POC is for learning purposes only. Any illegal operations are prohibited. If used for malicious destruction, it has nothing to do with the author!!! Usage Single URL verification root@kitploit: python CVE-2022-26134.py target url Batch URL verification...

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments root@kitploit: usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PRO...

twoplustwo

twoplustwo Implementing CVE-2020-0601...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

CVE-2021-20837

CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...

cve-2020-2555

CVE-2020-2555 Running Main.java will generate payload.ser in the current directory. This payload can be sent to the target server using the t3 protocol...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 statically linked implementation based on Blasty's that doesn't need gcc. payload.so is encoded from payload.h and written to the disk. Statically compiled binary included for convenience. Original PoC and author https://twitter.com/bl4sty/status/1486092552755466242?s=...

CVE-2024-7029

EN GenAvTechRCEExploit A PoC exploit for the CVE-2024-7029 vulnerability found in AvTech devices, allowing Remote Code Execution RCE. This tool can scan for vulnerable devices and execute commands on them interactively. Features Vulnerability Detection : Check if AvTech devices are vulnerable to...

cve-2026-24858

CVE-2026-24858 PoC helper CVE-2026-24858 - Administrative FortiCloud SSO authentication bypass This repository contains a conservative Python helper for scanning Fortinet web management indicators and an optional explicit payload sender. The exploit/payload sender is disabled by default and...