connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 y CVE-2024-1709 Una prueba de concepto desarrollada por @watchTowr para explotar una omisión de autenticación y añadir un nuevo usuario administrativo en ConnectWise ScreenConnect. Este es el primer paso en una cadena trivial de Ejecución Remota de Comandos. Sigue al equipo de...

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

CVE-2025-7771

CVE-2025-7771 Exploit to invoke arbitrary kernel-mode functions from usermode by abusing ThrottleStop driver. Demonstration References https://github.com/jonomango/superfetch https://securelist.com/av-killer-exploiting-throttlestop-sys/117026/...

fat-finger

Fat-Finger Extends the original finger.nse and attempts to enumerate current logged on users through a full match of the username and a partial match of the GECOS field in /etc/passwd Example output: root@kitploit: @output PORT STATE SERVICE 79/tcp open finger | fat-finger: finger: admin: no such...

CVE-2020-15392

CVE-2020-15392 User Enumeration on Supravizio BPM 10.1.2 Description A user enumeration vulnerability flaw was found in Supravizio BPM, version 10.1.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,...

CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

CVE-2024-23700

PoC for CVE-2024-23700, allowing silently obtain permissions to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls or answer incoming calls, manipulate call settings, access & control notifications sent by other apps, control nearby devices, access microphone to recor...

BigFinger

CVE-2023-46747 - Big-IP RCE Unauthenticated This is a Python3 script to exploit the unauthenticated remote code execution vulnerability CVE-2023-46747 in F5 BIG-IP appliances via the TMUI interface. Basically, if this vuln hits, you get a shell without credentials. Built with threading, file inpu...

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - Android Update Ownership Trust Bypass PoC A complete Android laboratory environment for reproducing and studying CVE-2026-0023. This repository demonstrates how CVE-2026-0023 allows a regular installer to influence an internal Android installation flag that should only be controll...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

amd_eop_poc

amdeoppoc CVE-2020-8950 AMD User Experience Program Launcher from Radeon Software Privilege Escalation FileWrite eop Read the note.txt https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html...

CredSpy

CredSpy Enumerate Microsoft Entra ID authentication methods for email addresses using the public GetCredentialType API. This is the same endpoint the Microsoft login page uses when you enter a username. In contrast to most tools using the GetCredentialType method, CredSpy also shows the...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

CVE-2023-29343

CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...

wssip

This repository does not have a README...

below-log-race-poc

below-log-race-poc CVE-2025-27591 Exploit Below privilege escalation Description This repository contains a proof-of-concept exploit for CVE-2025-27591 , a privilege escalation vulnerability in the below utility. The issue arises because below mishandles log files under /var/log/below/, allowing...

CVE-2026-19478-PoC

CVE-2026-19478 PoC Unauthenticated remote code-injection in GitLab's GraphQL layer that lets an attacker modify or delete public projects and user data with a single crafted query. No authentication, no user interaction, no special privileges...

codoforum

CVE-2020-5842 Stored XSS Vulnerability in Codoforum 4.8.3 Listed in: Exploit-db, Cve Mitre and The daily swig While I was searching for a free forum software for our community I found Codoforum. After installing it We Vyshnav Vizz tried a few simple XSS payloads to ensure the security and suddenl...

Nosql-MongoDB-injection-username-password-enumeration

Nosql injection username and password enumeration script Using this script, we can enumerate Usernames and passwords of Nosqlmongodb injecion vulnerable web applications. Exploit Title: Nosql injection username/password enumeration. Author: Kalana Sankalpa Anon LK. Website:...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...