gpp-encrypt

gpp-encrypt Description This little script encrypts password to gpp cpassword. It useful to create vulnerable lab AD. Requirements This package require: python3 python3 Standard Library Installation root@kitploit: git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd "gpp-encrypt"...

CVE-2023-38831-Exploit-and-Detection

CVE-2023-38831-Exploit-and-Detection This repository has both an attack detection tool and a Proof-of-Concept PoC Python script for the WinRAR CVE-2023-38831 vulnerability...

RDP_jammer

RDPjammer CVE-2012-0152 利用 Metasploit 和 BASH 的漏洞利用 语法 : Script.sh...

edb-49263-fixed

edb-49263-fixed - GitLab 11.4.7 - 经过身份验证的远程代码执行 这是Python脚本的修复版本，用于利用CVE-2018-19571和CVE-2018-19585（GitLab 11.4.7 - 经过身份验证的远程代码执行），该脚本可在 https://www.exploit-db.com/exploits/49263 Python 3.9 处获取。 用法 编辑脚本，将其中的目标地址替换为实际目标地址。 另外请注意，您需要： 1. 在目标GitLab实例上拥有一个有效的用户账户， 2. 在脚本运行的目录中，以端口80运行一个（python）Web服务器， ...

Struts2-045-Exp

Struts2-045-Exp Struts2-045 exploitation script For testing purposes only usage:python3 struts2-045-exp.py url cmd...

CVE-2018-11776

CVE-2018-11776 PoC Script for this Vuln...

CVE-2020-1472

ZeroLogon 测试脚本 一个使用 Impacket 库测试 Zerologon 漏洞（CVE-2020-1472）的 Python 脚本。 它尝试执行 Netlogon 身份验证绕过。成功执行绕过后，脚本会立即终止，不进行任何 Netlogon 操作。当域控制器已修补时，检测脚本将在发送 2000 对 RPC 调用后放弃，并得出结论目标不易受攻击（假阴性概率为 0.04%）。 安装 需要 Python 3.7 或更高版本以及 Pip。按如下方式安装依赖项： root@kitploit: pip install -r requirements.txt 请注意，只要未来的 Impack...

CVE-2022-30525

CVE-2022-30525 python CVE-2022-30525-POC.py -u http://sit.com Image...

vCenter-Server-Workaround-Script-CVE-2021-44228

vCenter Server Workaround instructions CVE-2021-44228 Workaround instructions to address CVE-2021-44228 in vCenter Server VMware vCenter log4j workaround This is the workaround VMware vCenter log4j vulnerability CVE-2021-44228 processs put together as a single script VMware have released a python...

CVE-2023-30212

CVE-2023-30212 LAB SETUP Prerequisite Download docker.io sudo apt install -y docker.io STEPS 1. Download all files from my repository using the below command. git clone https://github.com/AAsh035/CVE-2023-30212.git 2. Now to make a docker image run the following command: sudo docker build -t vuln...

CVE-2025-57310

CVE-2025-57310 Una vulnerabilidad de Cross-Site Request Forgery CSRF en Salmen2/Simple-Faucet-Script v1.07 a través de una solicitud POST manipulada a admin.php?p=ads&c=1 que permite a los atacantes ejecutar código arbitrario. CWE CWE-352: Cross-Site Request Forgery CSRF CVSS v3.1 Puntuación Base...

CVE-2023-4966

CVE-2023-4966 利用脚本 CVE-2023-4966 - NetScaler ADC 和 NetScaler Gateway 内存泄漏利用 用法： root@kitploit: usage: python banner.py optional arguments: -h, --help show this help message and exit --target TARGET The Citrix ADC / Gateway target, excluding the protocol e.g. 192.168.1.200...

CVE-2022-32132

CVE-2022-32132 for osTicket | Support Ticketing System Reflected XSS: root@kitploit: Payload: " onmouseover="alert1 http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert1%22%20style=%22position:fixed;top:0px;right:0;bottom:0px;left:0px;&sort=name...

stop-zenbleed-win

Stopping Zenbleed CVE-2023-20593 on Windows The newly discovered Zenbleed vulnerability CVE-2023-20593 affects all Zen2 processors from AMD. Unfortunately, AMD will not provide microcode updates for many of its processors until November or December 2023. How to stay safe in the meantime? Luckily,...

WerkGhost

WerkGhost Exploit for Werkzeug -p -d --timeout -t Example root@kitploit: python werkghost.py -u http://127.0.0.1:8000 -p CON -d download --timeout 3 -t 100...

CVE-2007-2447

CVE-2007-2447 - username map script "MS-RPC 功能在 Samba 3.0.0 到 3.0.25rc3 版本的 smbd 中，允许远程攻击者通过 shell 元字符执行任意命令，涉及 1 SamrChangePassword 函数，当 smb.conf 选项 "username map script" 启用时；并允许远程认证用户通过其他 MS-RPC 函数中的 shell 元字符执行命令，涉及 2 远程打印机和 3 文件共享管理。" Exploit 安装： 此漏洞利用需要 Python 3.7 或更高版本 root@kitploit: python...

CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripting XSS CVE-2025-25612 FS Inc S3150-8T2F prior to version S3150-8T2F2.2.0D135103 is vulnerable to Cross Site Scripting XSS in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious...

Grafana_POC-CVE-2021-43798

Grafana-Poc 此工具请勿用于违法用途。 一、使用方法：python3 grafanahole.py 在domain.txt中填入ip:port 二、漏洞影响范围 影响版本： Grafana 8.0.0 - 8.3.0 安全版本： Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

CVE-2023-30190-FOLLINA

CVE-2023-30190-EXPLOIT.py...

-cve-2025-55182

CVE-2025-55182 Mass / Single URL Detection Script image An efficient CVE-2025-55182 vulnerability detection tool, supporting single URL quick detection and batch URL detection, automatically generating detailed Excel detection reports, and outputting complete log files. 🔥 Core Features Supports...