modrosnlr5

🧬 modrosnlr5 – Linux Kernel LPE PoC CVE-2026-31431 Proof-of-concept tool designed to validate the exploitation of the CVE-2026-31431 vulnerability on Linux systems. The exploit leverages the kernel's AFALG socket interface to inject a payload and obtain a root shell from an unprivileged user...

PyUsernameMapScriptRCE

PyUsernameMapScriptRCE CVE-2007-2447 exploit written in python to get reverse shell...

CVE-2019-9978

Social Warfare Plugin Wordpress 3.5.2 Remote Code Execution Wordpress Social Warfare Remote Code Execution AUTO UPLOAD SHELL Date: March, 2019 Download Link: https://wordpress.org/plugins/social-warfare/ Reference: https://wpvulndb.com/vulnerabilities/9259 Version: CVE: 2019-9978 USAGE: python...

EFS_CVE-2021-43217

EFS Bypass VulnerabilityCVE-2021-43217 Objective This vulnerability demonstration aimed to establish a controlled environment for simulating an EFS bypass on windows 10 through Kali Linux. The primary focus was to perform a vulnerability pentration and show the possiblity of controlling a desktop...

kuang_grade_mk11

kuanggrademk11 Псевдо-оболочка для CVE-2013-0156...

CVE-2026-31431

CVE-2026-31431 — Local Privilege Escalation via AFALG 2026-04-29 — I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: root@kitploit: musl-gcc -static -Os -o exploit...

CVE-2022-22963_Reverse-Shell-Exploit

CVE-2022-22963 Reverse Shell Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

CVE-2014-6271

CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. 📝 Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Some docker images to play with CVE-2021-41773 and CVE-2021-42013 run docker compose up -d to spin up all the containers. Servers will run on ports 8080, 8081, 8082, and 8083. 8080 contains an Apache 2.4.49 with CGI disabled. 8081 contains an Apache 2.4.49 with CGI...

CVE-2023-422-Chamilo-LMS-RCE

Prerequisites root@kitploit: pip install requests Information The python script uses the vulnerability CVE-2023-422 to upload a file into the server and uses that file to send a reverse shell to the netcat listener and all this can be done without being authenticated. However, you will need to...

CVE-2023-27163-AND-Mailtrail-v0.53

Automatic Exploit Summary The following exploit abuses Requests Baskets v1.2.1 SSRF vulnerability to forward the internal application running at 127.0.0.1:80 to the external application at /pwned. Once the Mailtrail v0.53 application has been forwarded it will execute a reverse shell command...

fusionpbx_rce_vulnerability

서문 이 간단한 코드는 Dustin Cobb가 Caller ID를 사용한 RCE – FusionPBX의 다중 취약점에서 소개한 연쇄 취약점의 구현을 완성하려고 시도합니다. RCE 재현 단계 1. 웹 브라우저에서 취약한 운영자 화면을 봅니다. 이 예제에서는 https://fusionpbxaddress/app/operatorpanel/index.php에 있습니다. 2. 원격 시스템rcelisteneraddress에서 netcat 리스너를 시작합니다.x 3. 원격 시스템의 다른 터미널 창에서 아래의 익스플로잇 코드를 실행합니다:...

CVE-2016-3714

CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imagickbuilder.py = Simple Payload Builder to Exploit CVE-2016-3714 imagickbypassshell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions Few Images of things working: Payload Builder: imagick...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu는 제가 작성한 Ruby 기반 MySQL 클라이언트 스크립트입니다. 일반 MySQL 클라이언트가 수행하는 대부분의 작업을 수행합니다: SQL 셸, 데이터베이스/테이블 업데이트/삭제/드롭, 사용자 추가/삭제, gzip 옵션을 포함한 데이터베이스/테이블 덤프...... 또한 침투 테스트를 조금 더 쉽게 해주는 몇 가지 추가 옵션이 있습니다. 여러 내장 PHP 명령 셸 옵션과 Pentestmonkey의 PHP 리버스 셸, 파일 쓰기 및 읽기를 위한 여러 옵션읽은 모든 파일은 나중에 오프라인 분석을...

ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 Exploit Wrapper One-liner setup for MS09-050 CVE-2009-3103 exploitation. No fuss, no debugging, just works. Why? Most MS09-050 scripts floating around require manual shellcode injection, have timing issues with handlers, or just don't work. This wrapper: Generates shellcode with...

CVE-2023-40294-and-CVE-2023-40295

Пока я запускал boron в своей среде, я случайно обнаружил 2 переполнения буфера в куче в libboron libboron.so.2 версия 2.0.8 при обработке слегка некорректного ввода. Это было официально протестировано как на Mac x8664, так и на Linux x8664: Файлы для воспроизведения reproduction.zip Компиляция g...

Strapi-RCE

Strapi-RCE Strapi CMS에서 인증되지 않은 원격 코드 실행을 위해 CVE-2019-18818과 CVE-2019-19609를 결합한 익스플로잇 스크립트입니다. 익스플로잇 이 스크립트는 Strapi CMS 버전 3.0.0-beta.17.4 이하에서 발견된 취약점을 악용하여 인증되지 않은 원격 코드 실행을 가능하게 합니다. 설명 익스플로잇은 먼저 비밀번호 재설정 취약점을 이용해 관리 사용자의 JSON 웹 토큰JWT을 획득합니다. 그런 다음 이 토큰을 사용하여 악성 페이로드를 Strapi CMS에 전송하고, 공격자 머신...

CVE-2025-32433-exploit

CVE-2025-32433-exploit rlwrap -cAr nc -lnvp 4444 python3 exploit.py...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Shell Script to mitigate CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache Installation root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Usage Complete fix and suggested way to mitigate the vulnerabilty This...

CVE-2020-24186

CVE-2020-24186 This script exploits the CVE-2020-24186 vulnerability in WordPress to upload a camouflaged PHP payload and obtain a shell on the target system. There are three modes of operation: 1. Interactive Shell: Uploads the basic webshell and enters an interactive mode, allowing you to send...