cve-2025-24813_poc

cve-2025-24813poc cve-2025-24813 Proof-of-Concept Script Affected Versions 9.0.0.M1 = tomcat = 9.0.98 10.1.0-M1 = tomcat = 10.1.34 11.0.0-M1 = tomcat = 11.0.2 Detection Method root@kitploit: python .\CVE-2025-24813-poc.py -u url Disclaimer This script is intended for legitimate security research...

CVE-2022-26134

CVE-2022-26134 Confluence OGNL expression injected RCECVE-2022-26134 poc and exp Update Add sandbox bypass, high version supported. Usage root@kitploit: Usage: python Confluencecve202226134RCE.py http://example.com/ The script will auto check target is vulnerable, and enter a pseudo-interactive...

kalimux

...

Malware-Exhibit

⚠️⚠️ Malware-Exhibit ⚠️⚠️ !TypeScripthttps:/...

CVE-2017-4490-install-Script-Python-in-Terminal-

CVE-2017-4490-install-Script-Python-in-Terminal- What is the CVE-2017-4490 post-Exploitation, == Come on, my idea Exploit, .bashrc in Use Many of the ideas are harmful 1 install Script Script webdeilvary In Terminal by Use .bashrc 2 Destroy and display horrifying texts In Terminal 3 Subversion an...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

Exploit-CVE-2024-31777

CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestricted File Upload PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-31777, a security vulnerability discovered in GUnet OpenEclass E-learning platform with a CVSS of 9.8 which affects the endpoint of...

XBadManners

XBadManners CVE Description CVE-2018-16323 is a memory leakage in processing XBM images. After XBM image was converted to another image type you can extract leaked memory bytes from image data. Discovered by d4d. Tool A pretty simple tool for generating CVE-2018-16323 PoC. Directory samples...

PySCTChecker

PySCTChecker Description This is a Quick and dirty Python script for checking if a domain properly implements Certificate Transparency. If so, it is possible to observe how Certificate Transparency is implemented on the server side. When a server implements Certificate Transparency, it must offer...

AutomatedRoot

AutomatedRoot Root MediaTek devices using mtk-su exploit CVE-2020-0069. Requirements Python 3.9 or newerin %PATH% for Windows. ADB in %PATH% for Windows. The CVE-2020-0069 PoC mtk-su. Usage Download the mtk-su binaries from the MediaTek's SU XDA page and move them to their corresponding folders...

wordlistctl

Description Script to fetch, install, update and search wordlist archives from websites offering wordlists with more than 6400 wordlists available. In the latest version of the Blackarch Linux it has been added to /usr/share/wordlists/ directory. Installation pacman -S wordlistctl Usage...

put2win

put2win Script to automate PUT HTTP method exploitation to get shell. Installation root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh Usage root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: -t TARGET Target URL/IP e.g...

CVE-2025-51860

CVE-2025-51860 Vulnerability description TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to Stored Cross-Site Scripting XSS in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by craftin...

Mass-CVE-2023-28121

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...

jsmon

JSMon JSMon - JavaScript Change Monitor for BugBounty Using this script, you can configure a number of JavaScript files on websites that you want to monitor. Everytime you run this script, these files will be fetched and compared to the previously fetched version. If they have changed, you will b...

dorkX

dorkX Pipe different tools with google dork Scanner Version 1.0 Install zoid@MSI /dorkX git clone https://github.com/ethicalhackingplayground/dorkX zoid@MSI /dorkX cd dorkX zoid@MSI /dorkX go build dorkx.go zoid@MSI /dorkX go build corsx.go zoid@MSI /dorkX go build csrfx.go zoid@MSI /dorkX go bui...

exif-gps-tracer

exif-gps-tracer A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps Prerequisite To run this script fluently , 1 You should have Google Maps API 2 You should enable Map JavaScript API...

CVE-2022-35914-poc

CVE-2022-35914 PoC References https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr Usage root@kitploit: pip install -r requirements.txt root@kitploit: ./CVE-2022-35914.py -h usage: CVE-2022-35914.py -h -u URL -c CMD -f HOOK --check --user-agent USERAGENT CVE-2022-35914 -...

iptables-essentials

Iptables Essentials: Common Firewall Rules and Commands ☑️ TODO Add useful Iptables configuration examples Add useful Kernel Settings sysctl configuration Add links to useful external resources Add advanced configuration examples, commands, rules Table of Contents Tools to help you configure...