antnium

Antnium root@kitploit: Anti Tanium A C2 framework and RAT written in Go. This source code is publicly published as reference for my presentation Develop your own RAT - AV & EDR Defense. Antnium inteded to fulfill my own requirements, and not those of others. Works for the campaigns i performed, b...

SliverKeylogger

Sliver Keylogger This extension to sliver was written mostly as a learning exercise into how sliver handles extensions. I would like to thank the entire Sliver team for there work on this public implant framework. I would especially like to thank @rkervell for answering many of my questions relat...

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

poc-CVE-2024-23897

poc-CVE-2024-23897 CVE-2024-23897: Jenkins Arbitrary File Read Lead to RCE 🎯 Affected Products and Versions root@kitploit: Product: Jenkins Continuous Integration/Continuous Delivery server Versions: Jenkins 2.441 and earlier, Jenkins LTS 2.426.2 and earlier Fixed in: Jenkins 2.442, Jenkins LTS...

CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation 🎯 Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...

CVE-2023-52709-PoC

Proof of Concept for CVE 2023-52709 "TI Bluetooth stack can fail to generate a resolvable Random Private Address RPA leading to DoS for already bonded peer devices" CVE 2023-52709 Summary When running Defensics test case SMP legacy 1001 with loop mode on DUT configured as resolvable private...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supported systems: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32,Win2003 x64 The original exp did not support XP and 2003. The current code adds support for these two system...

CVE-2024-9264

CVE-2024-9264-RCE-Exploit in Grafana via SQL Expressions Description Proof Of Concept for Remote Code Execution in Grafana CVE-2024-9264 This repository contains a Python script that exploits a Remote Code Execution RCE vulnerability in Grafana's SQL Expressions feature. By leveraging insufficien...

cve-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

CVE-2025-32463

Heavily influenced/copied/based on the format of a similar repo by pr0v3rbs -- https://github.com/pr0v3rbs/CVE-2025-32463i\chwoot.git This is a C reimplementation for rapid, single-source delivery, execution, and cleanup. CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a...

CVE-2025-49132-PoC

CVE-2025-49132 PoC by Pwndalf Overview This repository contains a Proof of Concept PoC for CVE-2025-49132, a Remote Code Execution RCE vulnerability affecting Pterodactyl Panel -l -p...

TokenPlayer

TokenPlayer Manipulating and Abusing Windows Access Tokens. TokenPlayer is just a small tool i made to learn win32 api programming and understand better the access token model of windows. Features: Stealing and Impersonating primary tokens. Impersonating Protected Processes. Bypassing UAC by usin...

MSSQL-Pentest-Cheatsheet

🗄️ MSSQL Pentest Cheatsheet A practical Microsoft SQL Server penetration testing cheat sheet designed for penetration testers, red teamers, and cybersecurity learners to understand how to enumerate, exploit, and abuse misconfigured MSSQL databases during security assessments. 🌐 Connect With Us 🔵...

CVE-2023-0830

CVE-2023-0830: EasyNAS 1.1.0 Authenticated OS Command Injection Exploit This Python script is a powerful exploit for EasyNAS version 1.1.0 with enhanced functionality, including an integrated listener. The vulnerability exploited is a command injection flaw, which requires authentication. The...

Roundcube_CVE-2025-49113

RCE in Roundcube CVE-2025-49113 - My Obsidian note .md date time Status: Completed Lab: Easy Tags: RCE | PHP | LABTHM | EXPLOIT | CVE by KRPT Paulo G. Werneck - Linkedin - in.com/pgw-script Impact : remote command execution post-login CVSS 9.9 Affected versions : ≤ 1.5.10 / 1.6.10 Patched : 1.5.1...

CVE-2025-70341

CVE-2025-70341: Insecure Permissions + Arbitrary Code Execution in App-Auto-Patch Summary App-Auto-Patch v3.4.2 creates its working directory with world-writable permissions chmod 777, enabling a local TOCTOU time-of-check-time-of-use race condition. An unprivileged local attacker can exploit thi...

CVE-2023-0179-POC-

CVE-2023-0179 POC Credits to https://github.com/TurtleARM Steps to Reproduce Install Ubuntu-22.04.5-live-server-iso and fully install the version, but don’t update the system Install the Linux kernel version 6.1.6 onto the Virtual Machine with the Ubuntu version 24.04.5 Install the following...

CVE-2024-0195

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2024-0195 Run bellow command to check CVE-2024-0195 -h Configurations 2. We integrated with the Telegram API...

CVE-2025-49113-PoC

CVE-2025-49113 Roundcube RCE PoC 🚀 How to launch the project 1. Starting the vulnerable server root@kitploit: cd Stand docker-compose up -d 2. Running the script against the target root@kitploit: cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...