Blinder

Blinder Blidner is a small python library to automate time-based blind SQL injection by using a pre defined queries as a functions to automate a rapid PoC development. Installation You can install Blinder using the following command: pip install blinder Or by downloading the source and importing ...

dnspooq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 For educational purposes only Requirements Docker compose Docker Exploit Launch containers root@kitploit: $ docker-compose up -d Run exploit.py root@kitploit: $ docker-compose exec attacker bash bash-5.0...

snakeyaml_cve_poc

snakeyamlcvepoc SnakeYAML-CVE-2022-1471-POC build Either build the jar on your host with mvn clean compile assembly:single Or use docker to build an image with docker build -t snakeyaml . run Run the container with docker run --rm -p8080:8080 snakeyaml or the jar if you built on your host with ja...

CVE-2024-1651-PoC

CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...

CVE-2021-4034

CVE-2021-4034 Three PoCs, two collected from elsewhere, one is my own — converted the Python3 script into a Python2 script. Usage: C usage: gcc cve-2021-4034-poc.c -o exp ./exp Python2 usage: python2 CVE-2021-4034-py2.py Python3 usage: python3 CVE-2021-4034-py3.py Feel free to give a star...

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

CVE-2026-63030

Wordpress Core / SQLi 6.9.0 - 6.9.4 7.0.0 - 7.0.1 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

CVE-2024-27316

CVE-2024-27316 I decided to call this vulnerability specifically "CVE-2024-27316" since I have tested it against this vulnerability. The underlying flaw effects other CVEs so I thought I'd mention those with the hope that others could test and modify this PoC : This PoC currently only works again...

nimbostratus

Nimbostratus Herramientas para el fingerprinting y la explotación de infraestructuras cloud de Amazon. Estas herramientas son una PoC que desarrollé para mi charla "Pivoting in Amazon clouds", desarrollada utilizando la excelente biblioteca boto para acceder a la API de Amazon. Para más informaci...

CVE-2019-0708-EXP-Windows

CVE-2019-0708-EXP-Windows-Version Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activities, the author is not responsible. Table of Contents toc Introduction CVE-2019-0708-EXP-Windows version runs as a single executable file, no need for Linux, Pytho...

apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...

cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2918-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a Poc I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

wpstorecart-exploit

Simple PoC of wpstorecart before 2.5.30 plugin exploit CVE-2012-3576 written in bash...

jankybank

jankybank Inspired by and largely borrowed from kozmer/log4j-shell-poc Works with eurogig/log4sheller Use to create a CTF based on Log4j...

CVE-2019-19842

CVE-2019-19842 PoC...

CVE-2021-22880

CVE-2021-22880 Usage Creating rails-server and PoC. refer to hackerOne...

CVE-2022-39425

CVE-2022-39425 CVE-2022-39425 PoC...

Switcheroo

Switcheroo Nintendo Switch JailBreak PoC This is a proof-of-concept of exploiting the CVE-2016-4657 vulnerability to allow for future jail-breaking of the Nintendo Switch console. Please beware that this is not a complete jailbreak, and the code shared here is for academic purpose only! We...

CVE-2024-23722-poc

CVE-2024-23722-poc Usage root@kitploit: python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently not open...