CVE-2024-24919

CVE-2024-24919 Usage Usage: ./CVE-2024-24919.sh -i -p -f Specifying an IP with -i root@kitploit: ./CVE-2024-24919.sh -i 190.XXX.XXX.XXX Check multiples IP with -f root@kitploit: ./CVE-2024-24919.sh -f uniq.txt File example root@kitploit: 192.168.0.1 192.168.0.2 192.168.0.3 ... 192.168.0.20...

CVE-2012-4431

Welcome to Apache Tomcat! What Is It? The Apache Tomcat® software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. The Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket specifications are...

cve-2022-31692

CVE-2022-31692 Una demostración de una omisión de autorización de Spring Security. Ver CVE-2022-31692 Omisión de autorización de Spring Security en Don't Panic!...

CVE-2019-16889-poc

Resource Consumption DOS on Edgemax v1.10.6 Resource consumption Denial of service. This was reported last year and has been fixed as of version 2.0.3 . It has been assigned CVE-2019-16889. This is my first time using asyncio, if you see a more efficient way to do this please let me know! See the...

wpstorecart-exploit

Simple PoC of wpstorecart before 2.5.30 plugin exploit CVE-2012-3576 written in bash...

frameworks_base_AOSP10_r33_CVE-2023-21251

This repository does not have a README...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon CVE-2020-1472, extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session. Executive Summary This exercis...

CVE-2026-82860

creationtimestamp| type| source ---|---|--- 2026-08-31 10:08:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muenxk3xdr2m 2026-08-31 10:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mueo2tduxd2u...

CVE-2026-82859

creationtimestamp| type| source ---|---|--- 2026-08-31 10:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muenxbor562e 2026-08-31 10:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mueo2rqbtw2c...

spring-cloud-gateway-rce

Spring Cloud Gateway Actuator API SpEL式インジェクションによるコマンド実行（CVE-2022-22947） 1.インストール root@kitploit: pip3 install -r requirements.txt 2.使用方法 root@kitploit: $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ \ / / /\ || | | | | | | || || || | / / / / \ V...

vaas-cve-2014-0160

漏洞即服务 - CVE 2014-0160 一个基于 Debian Wheezy Linux 的系统，包含易受攻击版本的 libssl 和 openssl，以及一个用于展示 CVE-2014-0160（即 Heartbleed）的 Web 服务器。 概述 此 Docker 容器基于 Debian Jessie，并已修改以使用易受攻击版本的 libssl 和 openssl。 一个简单的静态网页通过 Apache 2 提供服务。 用法 使用 docker pull hmlio/vaas-cve-2014-0160 安装容器 使用端口映射运行容器：docker run -d -p...

vaas-cve-2014-0160

Vulnerability as a Service - CVE 2014-0160 A Debian Wheezy Linux system with a vulnerable version of libssl and openssl and a web server to showcase CVS-2014-0160, a.k.a. Heartbleed. Overview This docker container is based on Debian Jessie and has been modified to use a vulernable version of libs...

CVE-2019-15107-Exploit

CVE-2019-15107 Python エクスプロイト このエクスプロイトは CVE-2019-15107 Webmin 1.890-1.920 を対象とした 認証不要の RCE であり、Python で実装されています。 使用方法 root@kitploit: python3 webminExploit.py python3 webminExploit.py 10.200.198.200 10000 whoami python3 webminExploit.py 10.200.198.200 10000 "curl -h"...

Windows_AFD_LPE_CVE-2023-21768

CVE-2023-21768 POC de Escalada de Privilegios Local autores: chompie & b33f Artículo de reproducción: hlingxbm Solo con fines de demostración. El exploit completo funciona en sistemas vulnerables Windows 11 22H2. La primitiva de escritura funciona en todos los sistemas vulnerables. Uso:...

instructions-summarizing

instructions-summarizing Site containing info useful for demonstrate CVE-2023-37273...

vamp-forticheck

vamp-forticheck Multi-Vendor Edge Device CVE Scanner — VampSecure Labs Overview vamp-forticheck is an asynchronous, non-destructive security scanner that detects CVE vulnerabilities across seven major network security vendors. It performs a structured three-phase analysis: 1. Passive detection —...

CVE-2021-21402-Jellyfin

CVE-2021-21402-Jellyfin Arbitrary File Read This POC is for learning and communication only. I am not responsible for any consequences arising from its use. python POC.py targets.txt...

ghostcat

This tool exploits an LFI vulnerability within Apache Tomcat named CVE-2020-1938 to not only view sensitive files, but also to run malicious JSP payloads. It can be downloaded here you will need to run it from the command line Usage:...

towelroot

towelroot CVE-2014-3153とその有名なエクスプロイトtowelrootのIA x86上での研究 この仕事は完了しましたが、コードを公開することはできません。会社の誰かが私に挑戦してきました : コンパイル gcc -fno-stack-protector -m32 -O0 -pthread towelroot.c -o towelroot...

CVE-2020-16898

"Bad Neighbor" Detection, CVE-2020-16898 Windows TCP/IP RCE Summary: A network detection package for CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability References: https://corelight.blog/2020/10/15/zeek-community-activates-to-detect-bad-neighbor-cve-2020-16898/...