CVE-2021-34473-NMAP-SCANNER

CVE-2021-34473-NMAP-SCANNER A massive scanner for CVE-2021-34473 Microsoft Exchange Windows Vulnerability Commands root@kitploit: nmap -iR 500000 -n -p 443 --script cve202134473.nse scan500k.txt nmap website.com -n -p 443 --script cve202134473.nse Example root@kitploit: Starting Nmap 7.92...

7-Zip-CVE-2025-0411-POC

7-Zip Mark-of-the-Web Bypass Vulnerability CVE-2025-0411 - POC CVE-2025-0411 Details "This vulnerability CVSS SCORE 7.0 allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that...

JQShell

JQShell A weaponized version of CVE-2018-9206. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use this software for illegal purposes. This software is intended for educational use only. No...

CVE-2024-35315-POC

This repository does not have a README...

Microsoft_Exchange_Server_SSRF_CVE-2021-26855

MicrosoftExchangeServerSSRFCVE-2021-26855 zoomeye dork：app:"Microsoft Exchange Server" Using the script MicrosoftExchangeServerSSRFCVE-2021-26855.py written with Seebug toolkit and pocsuite3, to probe data from the past year: 成功率约为：1500 / 5000 = 30%...

Important: Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - ffmpeg

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2023-38831_ReverseShell_Winrar-RCE

OBTENCIÓN DE REVERSE SHELL EXPLOTANDO LA VULNERABILIDAD CVE-2023-38831 DE WINRAR En este repositorio vamos a explotar la vulnerabilidad CVE-2023-38831 de winrar de tal forma que podamos obtener una reverse shell desde la máquina víctima Windows a la máquina atacante Kali Linux. PASOS PREVIOS...

ROOT-OS-UBUNTU-2404-CVE-2025-3887 CVE-2025-3887 in gst-plugins-bad1.0 - Patched by Root

Root has patched CVE-2025-3887 in the gst-plugins-bad1.0 package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2024-5932-web-ui

How to start Install root@kitploit: pip install -r ./requirement.txt Run root@kitploit: python3 ./app.py...

log4j_checker

Log4jchecker.py CVE-2021-44228 Descripción Este script en Python3 intenta buscar servidores vulnerables a CVE-2021-44228, también conocido como Log4Shell, una vulnerabilidad muy crítica encontrada en la librería de registro de Java Log4j2. No depende de servidores DNS de registro externos para...

HuaWei_Route_HG532_RCE_CVE-2017-17215

HuaWeiRouteHG532RCECVE-2017-17215 POCsuite and goland implementation of Huawei HG532 router command injection CVE-2017-17215 POC goland Implementation POCsuite Implementation For writing and code, please refer to: https://blog.csdn.net/qq41490561/article/details/127659604...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit IDs de CVE CVE-2019-11061 : Control de acceso roto en HG100 Productos afectados : ASUS SmartHome Gateway HG100 Versión de firmware Productos afectados : Aplicación ASUS SmartHome Android APP versión 3.0.45190701 Descripción Si el atacante está en la misma red interna que el...

POC_Metabase_CVE-2023-38646

Solo con fines educativos Inspirado en la investigación de Assetnote CVE: CVE-2023-38646 CVSS: 9.8 Enlace del proveedor: clic Versión vulnerable Metabase Enterprise 1.46 Solo probado en ParrotOS Resultado...

blackvue-cve-2023

BlackVue DR750 CVEs + more The below is for educational purposes only, do not try this on any device you do not own or have permission to use. As of writing, there are about 300 vulnerable BlackVue devices online, which can easily be discovered and exploited, and no official patch is out. BlackVu...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

CVE-2018-1304

This repository does not have a README...

spring4shell_victim

spring4shellvictim Intentionally vulnerable Spring app to test CVE-2022-22965 For more information: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ Usage Build The following code will quickly build a vulnerable Docker image using the following components: JDK...

ROOT-APP-PYPI-CVE-2026-53539 CVE-2026-53539 in python-multipart - Patched by Root

Root has patched CVE-2026-53539 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 Subida de shell inversa Una versión ligeramente modificada del Mt-Code POC que genera una shell inversa completa en lugar de una web shell. Este exploit utiliza el famoso PentestMonkey PHP Reverse Shell. Instalación pip install -r requirements.txt Ejemplo de uso: Cre...

CVE-2025-67038

cve-id ⚡ Uso simple Utilice este proyecto únicamente en entornos seguros y autorizados, tales como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Project use pyth...