pocsploit

pocsploit 中文 README pocsploit is a lightweight, flexible and novel open source poc verification framework Pain points of the POC framework in the market 1. There are too many params, I don't know how to get started, but only some of them are commonly used. 2. YAML poc frameworklike nuclei & xray ...

pocsploit

pocsploit 中文 README pocsploit es un marco de verificación de POC de código abierto ligero, flexible y novedoso Puntos débiles del marco de POC en el mercado 1. Hay demasiados parámetros, no sé por dónde empezar, pero solo algunos de ellos se usan comúnmente...

CVE-2017-0478

CVE-2017-0478 poc of CVE-2017-0478 The file of FrameSequencewebp.cpp is not compiled in AOSP currently, so when you compile libframesequence.so with webp, you need compile with FRAMESEQUENCEINCLUDEWEBPlike this: FRAMESEQUENCEINCLUDEWEBP=true mm -B...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection Documento en chino Artículos relacionados Descripción JNDI-Injection-Exploit es una herramienta para generar enlaces JNDI funcionales y proporcionar servicios en segundo plano iniciando un servidor RMI, un servidor LDAP y un servidor HTTP. El...

CVE-2022-26134

CVE-2022-26134 Installation root@kitploit: 下载py,本地cmd运行 Usage poc root@kitploit: python3 CVE-2022-26134.py -u http://www.xxx.com exp root@kitploit: python3 CVE-2022-26134.py -u http://www.xxx.com -c id Disclaimer🧐 This tool is only intended for legally authorized enterprise security construction...

zerologon-poc

zerologon-poc A script to exploit CVE-2020-1472 Zerologon Not my research. I just wrote a PoC based on the brilliant work of other who discovered this vuln...

pocs

pocs 我们将在此仓库中发布PoC 此仓库中的所有漏洞均已负责任地披露...

CVE-2020-13925

CVE-2020-13925 Environment Setup Refer to https://github.com/apache/kylin to deploy using Docker, and change the version to 3.0.1 the vulnerable version. You can remove -m 8G \ it controls the allocated memory size. Then visit http://host:7070/kylin/login. The default username and password are...

qark

クイックAndroidレビューキット このツールは、ソースコードまたはパッケージ化されたAPKのいずれかにおいて、いくつかのセキュリティ関連のAndroidアプリケーション脆弱性を探すために設計されています。また、発見した脆弱性の多くを悪用可能な「Proof-of-Concept」デプロイ可能なAPKやADBコマンドを作成することもできます。このツールは、それ以外は安全な条件下で悪用可能な脆弱性に焦点を当てているため、テストデバイスをroot化する必要はありません。 必要条件 Python 2.7.13 および 3.6 でテスト済み OSX、Linux、Windows でテスト済み 使用...

CVE-2026-23744

root@kitploit: usage: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC options: -h, --help show this help message and exit --lhost, -l LHOST Attacker IP address --lport, -p LPORT Attacker port --rhost, -t RHOST Target URL...

CVE-2026-20230-Scanner

CVE-2026-20230 Scanner A Python-based scanner and validation tool for identifying potentially vulnerable Cisco Unified Communications Manager Unified CM deployments affected by CVE-2026-20230. Features Detects Cisco Unified CM instances Checks WebDialer exposure Supports single-target and bulk...

CVE-2025-24893-POC

CVE-2025-24893 Install bun: root@kitploit: curl -fsSL https://bun.com/install | bash To install dependencies: root@kitploit: bun install To run: root@kitploit: bun run CVE-2025-24893.ts This project was created using bun init in bun v1.2.19. Bun is a fast all-in-one JavaScript runtime. How to use...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: root@kitploit: docke...

CVE-2024-6205

CVE-2024-6205 pip install requests This is a python written PoC of a recent vulnerability in a wordpress plugin. More information on that here https://nvd.nist.gov/vuln/detail/CVE-2024-6205 https://cvefeed.io/vuln/detail/CVE-2024-6205...

CVE-2018-6574

CVE-2018-6574 Vulnerble-code PoC para explotar CVE-2018-6574 en Pentesterlab!!...

CiscoSpectreTakeover

CiscoSpectreTakeover A PoC chain exploit using the recent Cisco SMP exploit CVE-2017-6736 to chain into Spectre CVE-2017-5753 and CVE-2017-5715 Credits Cisco RCE Exploit submodule by artkond: https://github.com/artkond/cisco-snmp-rce JS Spectre Chrome POC by ascendr:...

BlockchainC2

BlockchainC2 BlockchainC2 is a small POC server/agent to assess how the Blockchain specifically Ethereum's Smart Contract functionality can be used by an attacker for C2. Details regarding this application can be found here. Smart Contract The Smart Contract used within this POC is quite simple:...

CVE-2020-0796

CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...

html-poc

Proof of concept code for client-side vulnerabilities Basic HTML proof of concepts for issues such as: Clickjacking insecure CORS settings CSRF Tabnapping XSSI postMessage issues Most of these are pretty basic, but having them all in one place avoids writing the same things over and over again. T...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Overview This code is a Python version POC for CVE-2023-32315. It performs a series of operations to verify whether the target website is affected by the CVE-2023-32315 vulnerability and attempts to execute certain operations on the affected...