CVE-2020-11651

CVE-2020-11651 Un script que explota SaltStack CVE-2020-11651 y CVE-2020-11652 para añadir nuevos usuarios a un master Salt vulnerable inyectando entradas en /etc/passwd y /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author:...

Windows10_Cumulative_Updates_PowerShell

Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...

CVE-2019-13051

Pi-Hole 4.3.2 Command Injection & PrivEsc CVE-2019-13051 Pi-Hole version 4.3.2 contains a patch to this vulnerability:https://github.com/pi-hole/AdminLTE/pull/974 A big thanks to the Pi-Hole dev team for their awesome project and for making it so easy to report this vulnerability! Executive Summa...

CVE-2018-2893

CVE-2018-2893 Vulnerability Verification Script Usage root@kitploit: python CVE-2018-2893.py 10.10.0.1 7001 Analysis Warning root@kitploit: https://www.anquanke.com/post/id/152164 Script Source root@kitploit: https://www.secfree.com/article-957.html...

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...

git_rce

CVE-2024-32002 PoC 1. You must set up the git's symbolic link option like: root@kitploit: git config --global core.symlinks true 2. Then exploit CVE-2024-32002 by the following command: root@kitploit: git clone --recursive https://github.com/EQSTSeminar/gitrce.git Attack Scenario...

CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Two mini Script to check if the PrintSpooler Serivce is running within the Forest. CVE-2021-1675: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675 CVE-2021-34527 aka PrintNightmare...

CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 Proof Of Concept This repository provides scripts to automatically deploy a WebDAV server on Ubuntu using Apache2 , and generate malicious.url shortcut files for use in phishing, red teaming, or lateral movement simulation. 📁 Contents setupwebdav.sh – Bash script to configure Apach...

SimpleCTF-UpdatedExploit

CMS Made Simple = 2.2.10 SQL Injection Exploit Overview This Python script exploits an unauthenticated SQL injection vulnerability in CMS Made Simple = 2.2.10 CVE-2019-9053. The exploit extracts sensitive information such as the salt, username, email, and password of the administrator from the CM...

Metasploit-Exploits-CVE-2023-6710

CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710 with metasploit and our comprehensive Proof of Concept PoC. This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated...

CVE-2013-3900-Remediation-Script

root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...

o365enum

Enumeración de usuarios de Office 365 Enumera nombres de usuario válidos de Office 365 usando ActiveSync, Autodiscover o la página de inicio de sesión de office.com. Uso o365enum leerá los nombres de usuario del archivo proporcionado como primer parámetro. El archivo debe tener un nombre de usuar...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

collateral-damage

Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit This script is written to improve this PoC script https://github.com/zerosum0x0/CVE-2019-0708 rdesktop binary was taking too long to timeout so i want it to timeout quicker Multiple ip scan was not possible now you can scan a given ip list Example Ru...

ReconPi

Recon Pi root@kitploit: . \ \ \ | | // / / \ / | / | | | \ /\ \ | \ | | | || /\ \ /|| /| || / / / / v2.2 - @x1mmartijn ReconPi - A lightweight recon tool that performs extensive reconnaissance with the latest tools using a Raspberry Pi. Start using that Raspberry Pi -- I know you all have...

CVE-2020-14882

CVE-2020-14882 This script enables remote code execution RCE on Oracle WebLogic Server using an unauthenticated GET request. It exploits the vulnerability CVE-2020-14882. By executing arbitrary commands, an attacker can gain unauthorized access to the server. Exploit Details Exploit Title: Oracle...

CVE-2022-1292

CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

CVE-2025-53547-POC

CVE-2025-53547 POC this is a poc for CVE-2025-53547 Chart.lock links test file to /tmp/1.txt /tmp/1.txt inject a command that create /tmp/2.txt In real product enviroment, you can change Chart.lock link file to inject any command you want such as: /root/.bashrc /root/.bashprofile /etc/profile...

Inline-Execute-PE

Inline-Execute-PE DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Design Considerations and Commentary" section! Introducti...