cve-2020-25540

ThinkAdmin Unauthorized Directory Listing/Arbitrary File Read cve-2020-25540 Usage root@kitploit: python3 cve-2020-25540.py url...

CVE-2019-0623-32-exp

Ce depot n’a pas de fichier README...

cve-2018-8120

CVE-2018-8120 win7 x64 Reference https://github.com/unamer/CVE-2018-8120 https://github.com/FuzzySecurity/PSKernel-Primitives...

nextjs-cve-2025-29927-poc

Next.js POC for CVE-2025-29927 Authorization Bypass in Next.js Middleware · CVE-2025-29927 · GitHub Advisory Database Next.js and the corrupt middleware: the authorizing artifact - zherowebsecurity- What is this? This vulnerability allow to bypass middleware logics. src/middleware.ts:...

CVE-2018-19131

CVE-2018-19131 Демо Автор: Jonathan M. Wilbur Год авторского права: 2018 Лицензия: MIT License Не делайте ничего незаконного с этим. Это не вредоносное ПО. Это всего лишь proof-of-concept. Это демонстрация CVE-2018-19131, которая запускается в приложении Docker Compose. Данный проект собирает Squ...

CVE-2017-0199-v5.0

Exploit toolkit CVE-2017-0199 - v5.0 Exploit toolkit CVE-2017-0199 - v5.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2025-22604-Cacti-RCE

CVE-2025-22604-Cacti-RCE...

POC-CVE-2022-28117

CVE 2022 28117 PoC Python with slight modifications Usage : python3 .\poccve2022-28117.py -x file:///etc/passwd -u username -p password http://192.168.148.140/navigate...

TelnetdBypass-

TelnetdBypass — CVE-2026-24061 Scanner A Python-based security scanner that detects and exploits CVE-2026-24061 , a critical CVSS 9.8 authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. How it Works The scanner injects a malicious USER=-f root value via the...

drupal-cve-2026-9082-checker

DRUPAL CVE-2026-9082 ЧЕКЕР Drupal CVE-2026-9082 Чекер Blind SQL-инъекций Установка root@kitploit: git clone https://github.com/N45HT/drupal-cve-2026-9082-checker.git cd drupal-cve-2026-9082-checker pip install -r requirements.txt Ссылки https://vulners.com/cve/CVE-2026-9082...

CVE-2020-14179

CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...

Shellshock_vuln_Exploit

🚨 Эксплойт Shellshock RCE CVE-2014-6271 Это Python-эксплойт для уязвимости Shellshock CVE-2014-6271, которая затрагивает GNU Bash. Эксплойт нацелен на CGI-скрипты на уязвимых веб-серверах и устанавливает обратную оболочку reverse shell на машину атакующего. Идентификатор CVE CVE-2014-6271 Отказ о...

Log4j-RCE

Log4j-RCE Log4j RCE - CVE-2021-44228 How To Run? root@kitploit: php log4j.php https://1337.com Requirements PHP CURL PAYLOAD DNS LOG Collaborator Burpsuite or use dnslog.cn List Payload root@kitploit: $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId $docker:containerName...

itsm-exploit

Эксплойты для Ivanti Neurons for ITSM On Premise Этот скрипт эксплуатирует несколько уязвимостей, которые позволяют неаутентифицированному злоумышленнику получить доступ администратора и выполнять удалённые команды CVE-2023-46808 на Ivanti Neurons for ITSM On Premise. Технические подробности см. ...

CVE-2019-12840-NodeJs-Exploit

CVE-2019-12840 root@kitploit: sudo node exploit.js...

CVE-2018-1133-Exploit

CVE-2018-1133-Exploit Этот репозиторий содержит скрипт эксплойта на Python для эксплойта Moodle Evil Teacher CVE-2018-1133. Использование root@kitploit: usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and exit -u URL...

CVE-2026-84838

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...

blackvue-cve-2023

BlackVue DR750 CVEs + more The below is for educational purposes only, do not try this on any device you do not own or have permission to use. As of writing, there are about 300 vulnerable BlackVue devices online, which can easily be discovered and exploited, and no official patch is out. BlackVu...

IOC_for_CVE-2021-28310

This repository does not have a README...

log4j-scan

log4j-scan Un scanner entièrement automatisé, précis et complet pour trouver des hôtes log4j vulnérables Fonctionnalités Prise en charge des listes d'URL. Fuzzing pour plus de 60 en-têtes de requête HTTP pas seulement 3-4 en-têtes comme dans les outils précédemment vus. Fuzzing pour les paramètre...