ScreenConnect-AuthBypass-RCE

How to use I'm using Python3.9 root@kitploit: pip install requests python check.py python batchAdduser.py root@kitploit: python ScreenConnect-AuthBypass-RCE.py -h usage: ScreenConnect-AuthBypass-RCE.py -h -u USERNAME -p PASSWORD -t TARGET -d DOMAIN --proxy PROXY CVE-2024-1708 && CVE-2024-1709 --...

Mass-CVE-2023-28121

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2020-6287-exploit

CVE-2020-6287-exploit PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 Thi...

CVE-2024-0204

CVE-2024-0204: Authentication Bypass in GoAnywhere MFT Script to create a new admin user in GoAnywhere MFT. Blog Post More details here: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Usage Password must be at least 8 characters long to meet GoAnywhere...

CVE-2024-4898-Poc

CVE-2024-4898-Poc CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration = 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

CVE-2023-20198-RCE

Fofa root@kitploit: body="window.onload=function url ='/webui';window.location.href=url;" && ishoneypot=false && isfraud=false Usage root@kitploit: usage: CVE-2023-20198-RCE.py -h -u URL -p PROXY -au ADDUSER -ap ADDPASS -du DELUSER -pm PRIVILEGEMODE -em EXPLOITMODE -oc OSCMD -cc CLICMD...

AddUser-SAMR

AddUser-SAMR Create local administrators using the SAMR API, operating at a lower level than net.exe, PowerShell's New-LocalUser or NetUserAdd API. It requires Administrator privileges and if the user exists, it gets added to the group but the password is not updated. There are 4 implementations ...

CVE-2023-28121-WordPress-Privilege-Escalation

🔐 CVE-2023-28121 — WordPress Privilege Escalation Practical exploitation of a critical vulnerability in WordPress using the WooCommerce Payments plugin. 📌 Summary CVE-2023-28121 allows creating administrator users without authentication via the REST API. Severity: Critical CVSS 9.8 Impact: Full...

CrushFTP_CVE-2025-54309

CVE-2025-54309 - CrushFTP Affected Versions 10.8.5 11.3.434 Race condition PoC by watchtower, adjusted to be more extensible. root@kitploit: python crushedftp.py usage: crushedftp.py -h -u USERNAME -p PASSWORD -r REQUESTS -P PAYLOAD target CrushFTP CVE-2025-54309 XML Race Condition Exploit...

WAGO-CVE-2023-1698

WAGO-CVE-2023-1698 WAGO系统远程代码执行漏洞CVE-2023-1698 Attention I have developed a tool for local testing and POC development, which is for technical learning reference only. Please do not use it for illegal purposes. Any direct or indirect consequences and losses caused by individuals or organizations...

CreateHiddenAccount

CreateHiddenAccount 创建隐藏账号 中文 | EN Tool Introduction There are two common ways to create a hidden account. One is to add the $ sign directly after the user name to create it, and the other is to use the registry to clone the user to create. . So I wondered if I could implement the process of...

CVE-2023-42793

TeamCity CVE-2023-42793 漏洞利用脚本 此Python脚本利用了JetBrains TeamCity中的一个安全漏洞（CVE-2023-42793），允许攻击者创建一个具有管理员权限的新用户。 使用方法 脚本接受单个TeamCity实例URL或URL列表作为输入。提供的URL应指向存在CVE-2023-42793漏洞的TeamCity服务器。 单个URL: root@kitploit: python exploit.py -u http://teamcity.example.com URL列表: root@kitploit: python exploit.py -l...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/'...

Dynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation

Dynamicweb contains a vulnerability which allows an unauthenticated attacker to create a new administrative user. id: CVE-2022-25369 info: name: Dynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation author: pdteam severity: critical description: Dynamicweb contains a vulnerability which...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...

exploit_CVE-2021-3560

CVE-2021-3560 Exploit Script This script exploits CVE-2021-3560, a vulnerability in polkit that allows privilege escalation to root. Usage After cloning the repository, grant execution permissions and run the script: root@kitploit: chmod +x exploit.sh ./exploit.sh Expected Outcome After running t...

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Automated Exploit for CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, does not perform an authentication check which allows an attacker without prior authentication to execute configuration tasks...

CVE-2023-43147

CVE-2023-43147 厂商：PHPJabbers 厂商主页：https://www.phpjabbers.com/ 软件链接：https://www.phpjabbers.com/limo-booking-software 版本：1.0 测试环境：Windows 10 Pro 影响：添加具有管理员权限的攻击者用户 CVE： limo-booking-software 中的跨站请求伪造漏洞允许远程攻击者执行添加用户操作并赋予管理员权限 POC 1 - 创建包含以下代码的文件并保存为 HTML。如果要保存新的请求以制造 CSRF，请确保将 roleid=0 改为 1 roleid=1...