CVE-2025-32433-exploit

CVE-2025-32433-exploit rlwrap -cAr nc -lnvp 4444 python3 exploit.py...

hblock

Mejora tu seguridad y privacidad bloqueando anuncios, rastreadores y dominios de malware. ¿Para qué sirve esto? hBlock es un script de shell compatible con POSIX que obtiene una lista de dominios que sirven anuncios, scripts de rastreo y malware de múltiples fuentes y crea un archivo hosts, entre...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. root@kitploit: -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id"...

Codiad-CVE-2018-14009

install codiad @ git clone https://github.com/Codiad/Codiad.git Steps to reproduction 1. Setup a vulnerable environment on ubuntu server with Codiad 2.8.4 latest version root@kitploit: @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Shell Script to mitigate CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache Installation root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Usage Complete fix and suggested way to mitigate the vulnerabilty This...

moonwalk

moonwalk Cubre tus huellas durante la Explotación de Linux / Pruebas de Penetración sin dejar rastros en los registros del sistema ni en las marcas de tiempo del sistema de archivos. 📖 Tabla de Contenidos Introducción Características Instalación Uso Contribución Licencia ℹ️ Introducción moonwalk e...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

CVE-2022-22963-POC

CVE-2022-22963 Exploit Description In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local...

0x00sec_code

Source Code for 0x00sec.org posts This repository contains the source code for my posts at 0x00sec.org. Remote Shell Post available at: Part I : https://0x00sec.org/t/remote-shells-part-i/269/1 Part II. Crypt your link: https://0x00sec.org/t/remote-shells-part-ii-crypt-your-link/306 Source code a...

vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 Remote Root Shell Exploit A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability CVE-2011-2523 present in vsFTP 2.3.4 Requirements Language Used = Python3 Modules/Packages used: socket os pexpect paramiko getpass datetime optparse...

CVE-2020-24186

CVE-2020-24186 This script exploits the CVE-2020-24186 vulnerability in WordPress to upload a camouflaged PHP payload and obtain a shell on the target system. There are three modes of operation: 1. Interactive Shell: Uploads the basic webshell and enters an interactive mode, allowing you to send...

CVE-2020-11108-PoC

CVE-2020-11108-PoC Two PoCs are in this repo. cve-2020-11108-rce.py will give you a shell as the www-data user. root-cve-2020-11108-rce.py will give you a shell and escalate privileges to root. Note: This is destructive as we must overwrite teleporter.php. For a full explanation/writeup please se...

CVE-2022-46169-CACTI-1.2.22

CVE-2022-46169-CACTI-1.2.22 This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer. Requirement optparse requests Usage On a port on your machine listen and then run the exploit as follows. root@kitploit: python3...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE This is a exploit of CVE-2019-16278 for Nostromo 1.9.6 RCE. This exploit allows RCE on the victim machine. Requirements optparse socat sys Usage You can use the exploit as follows: root@kitploit: python3 CVE-2019-16278.py --ip=10.129.192.225 --port=80...

CVE-2010-2075-UnrealIRCd-3.2.8.1

CVE-2010-2075 Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1. Requirements optparse, signal Usage You can send a command to execute, but there will be times when it will not respond, but you can simply send a reverse shell and wait for it to arrive...

smtpshell

smtpshell Una simple Reverse Shell que puede comunicarse a través de Gmail SMTP o cualquier otro SMTP para evadir restricciones de red Nota: root@kitploit: Este reverse shell se comunica a través de Gmail SMTP o puedes usar cualquier otro SMTP pero Gmail SMTP es válido porque la mayoría de las...

CVE-2021-31630

OpenPLC WebServer v3 - Authenticated RCE CVE-2021-31630 This exploit is based on the exploit from Exploit-DB made by Fellipe Oliveira. First, authenticate Upload a malicious C file Compile it Start the PLC initiate reverse shell Stop the PLC no need to run it, the reverse shell is already initiat...

CVE-2023-21823

CVE-2023-21823 Reverse Shell for Windows This repository contains C code that implements a reverse shell for the Windows operating system. A reverse shell allows for remote system control using the command-line, providing the ability to execute commands on the infected machine. Important Using th...

CVE-2026-24061-lab

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purposes only. Isolated lab environment. Français ci-dessous Summary Critical authentication bypass CVSS 9.8 in GNU InetUtils telnetd ≤ 2.7. By injecting -f root as the USER variable via the Telnet NEWENVIRON option, an unauthenticated attacker...