HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

CVE-2016-10033

CVE-2016-10033 Remote Code Execution vulnerability in PHPMailer. More about CVE-2016-10033: CVE-2016-10033 Wiki...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

themida-devirt

Themida/CodeVirtualizer Devirtualizer Example This project demonstrates the effect of devirtualizing code protected by Themida or CodeVirtualizer. Below, you can see a simple example showing the code before virtualization and the code after devirtualization side by side. Before Virtualization|...

By-Poloss..-..CVE-2017-20251

CVE-2017-20251: Insert PHP Plugin PHP Code Injection Vulnerability Title Unauthenticated PHP Code Injection via Shortcode Processing in Insert PHP Plugin Basic Information...

CVE-2025-6440

CVE-2025-6440 — WordPress WooCommerce Dynamic Pricing & Discounts Plugin Overview This repository contains a Python proof-of-concept PoC script for testing an unauthenticated file upload vulnerability affecting the WordPress WooCommerce Dynamic Pricing & Discounts plugin. ⚠️ This project is...

CVE-2020-10238

Made by HK CVE-2020-10238: Incorrect Access Control in comtemplates- RCE CVE-2020-10239: Incorrect Access Control in comfields SQL field- RCE Link https://developer.joomla.org/security-centre/804-20200303-core-incorrect-access-control-in-com-templates.html...

CVE-2017-9101

PlaySMS 1.4 authenticated RCE Simple method of performing remote code execution through the Phonebook CSV upload issue as described on ExploitDB. Either run a single command: root@kitploit: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token...

CVE-2024-6387

CVE-2024-6387 regreSSHion Proof of concept python script for regreSSHion exploit. Version 0.2.1 build POC Installation root@kitploit: git clone https://github.com/l-urk/CVE-2024-6387.git root@kitploit: cd CVE-2024-6387 root@kitploit: pip3 install -r requirements.txt root@kitploit: python3...

CVE-2020-2883

CVE-2020-2883 First clone the framework root@kitploit: git clone https://github.com/Y4er/CVE-2020-2555 Then place CVE20202883.java into the src/com/supeream/CVE20202883.java directory Import into IDEA and run CVE20202883.java for RCE! Screenshot...

Anti_Killer

This repository does not have a README...

android-reverse-engineering-skill

Android Reverse Engineering & API Extraction — Claude Code skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns — so you can document and reproduce them witho...

CVE-2015-6132

CVE-2015-6132 Microsoft Office / COM Object DLL Planting Original poc: https://www.exploit-db.com/exploits/38968/ Running poc.rtf with mqrt.dll in the same directory will trigger the dll, which in this case pop calc making Down/exec Dll will work as well Exporting the dll to run from Samba/WebDav...

CVE-2022-26134

CVE-2022-26134 ATLASSIAN-Confluence RCE Installation root@kitploit: git clone https://github.com/kelemaoya/CVE-2022-26134.git cd CVE-2022-26134 pip3 install -r requirements.txt Usage Single URL pocsuite -r ../CVE-2022-26134.py -u url --verify Batch URLs pocsuite -r ../CVE-2022-26134.py -f url.txt...

CVE-2022-21445-for-12.2.1.3.0-Weblogic

Overview CVE-2022-21445 CVSS 9.8, a vulnerability is an untrusted data deserialization, identified in the ADF Faces component, which can be exploited remotely by attackers without authentication pre-authentication to perform RCE. This vulnerability was discovered by two cybersecurity experts:...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview...

CVE-2023-38646

CVE-2023-38646 Automatic Tools For Metabase RCE Exploit Known As CVE-2023-38646. Read https://secry.me/explore/news/metabase-rce-cve-2023-38646/ for more information POC, Dork How to Use single.py root@kitploit: python3 single.py --url=http://127.0.0.1:8080 --command="curl...

CVE

CVE's Table CVE Number| Type| Company/Product| Description| Article Link| Repository Link ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows July 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| Missing sanitizati...

ConfluentPwn

ConfluentPwn Confluence pre-auth ONGL injection remote code execution scanner CVE-2022-26134. Usage The below GIF shows a demo usage of the tool: Here is the help output of the tool: root@kitploit: $ ./cfscan -h +-------------------------------+ | C O N F L U E N T P W N |...

S2-057-CVE-2018-11776

S2-057-CVE-2018-11776 A simple exploit for Apache Struts RCE S2-057 CVE-2018-11776 IMPORTANT: Is provided only for educational or information purposes. Deploy test environment root@kitploit: git clone https://github.com/vulhub/vulhub cd vulhub/struts2/s2-057 docker-compose up -d Usage exploit.py...