Lucene search
+L

22578 matches found

Kitploit
Kitploit
added 2026/09/08 8:26 a.m.69 views

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:22 a.m.4 views

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

8.8CVSS6.7AI score0.00962EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/08 7:21 a.m.5 views

CVE-2026-53753-Crawl4AI-RCE

CVE-2026-53753 — Crawl4AI Unauthenticated Remote Code Execution AST Sandbox Escape Pre-authentication RCE in Crawl4AI.read — returning the command's output in-band in the JSON response...

10CVSS6AI score0.029EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 7:18 a.m.3 views

CVE-2026-31431

CVE-2026-31431 Structure root@kitploit: . ├── container │ ├── container.md Container escape ideas │ ├── expenv Container environment │ │ ├── bin │ │ │ ├── gscontainer │ │ │ └── share │ │ ├── Dockerfile │ │ ├── run.sh │ │ └── src │ │ ├── gscontainer.c │ │ └── share.c │ ├── images │ │ ├──...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242References1
Kitploit
Kitploit
added 2026/09/08 7:17 a.m.9 views

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Overview A proof-of-concept demonstration and learning environment for CVE-2025-31133 , a security vulnerability in runc that allows bypassing maskedPaths protection through a race condition. maskedPaths are designed to prevent containers from accessing sensitive ho...

7.8CVSS7.5AI score0.00841EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/08 6:54 a.m.4 views

CVE-2023-30547

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...

10CVSS8.4AI score0.72087EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/08 6:36 a.m.7 views

CDK

CDK - Zero Dependency Container Penetration Toolkit English | 简体中文 Legal Disclaimer Usage of CDK for attacking targets without prior mutual consent is illegal. CDK is for security testing purposes only. Overview CDK is an open-sourced container penetration toolkit, designed for offering stable...

6AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/08 6:22 a.m.3 views

CopyFail

Local Privilege Escalation / Container Escape CVE-2026-31431 Usage: go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail Affected Versions: Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42 Alibaba Cloud...

7.8CVSS6.3AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/08 6:21 a.m.5 views

CVE-2022-0847-Container-Escape

CVE-2022-0847 CVE-2022-0847 used to achieve container escape overwrite any read-only files on host Slides in Chinese available here 利用CVE-2022-0847 Dirty Pipe 实现容器逃逸(效果为覆写宿主机上任意只读文件) 中文汇报PPT在这里 Introduction If the kernel is vulnerable to CVE-2022-0847, the attacker can overwrite read-only files...

7.8CVSS7.1AI score0.89721EPSS
SaveExploits101References1
Kitploit
Kitploit
added 2026/09/08 6:04 a.m.8 views

CVE-2007-4559

demonstration of CVE-2007-4559 what is this? This is a demonstration of how python's default handling of tar file extraction prior to python v3.11.4 is vulnerable to a simple symlink attack. The instructions below describe how to craft a malicious payload. The script untar.py demonstrates how and...

9.8CVSS7AI score0.27095EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 5:51 a.m.8 views

CVE-2024-4040

CVE-2024-4040 - exploit scanners This repository contains files related to CVE-2024-4040 CrushFTP VFS escape. scanhost.py This script attempts to use the vulnerability to read files outside the sandbox. If it succeeds, the script writes Vulnerable to standard output and returns with exit code 1. ...

10CVSS7.6AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/08 5:48 a.m.6 views

CVE-2025-4517-tarfile-PATH_MAX-bypass

CVE-2025-4517 / CVE-2025-4330 — Python tarfile Data Filter Bypass via PATHMAX Overflow Author: 0xDTC CVEs: CVE-2025-4517 / CVE-2025-4330 Advisory: GHSA-6r6c-684h-9j7p CPython Fix: PR 135037 Overview Python's tarfile.extractallfilter="data" is supposed to safely extract tar archives by preventing...

9.4CVSS6.8AI score0.0143EPSS
SaveExploits11References3
Kitploit
Kitploit
added 2026/09/08 5:33 a.m.5 views

Exploit11.2

Exploit11.2 Exploit iOS 11.2.x by ZIMPERIUM and semi-completed by me. Sandbox escapes on CVE-2018-4087.This checks also of a root access incompleted. You can creat an app to running exploit on your device if you are a developer and turn the root access @. Thanks to: •RaniXCH, Adam Donenfeld,...

9.3CVSS7.5AI score0.07213EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 5:31 a.m.7 views

cve-2025-49131-poc

CVE-2025-49131 - FastGPT Sandbox Escape POC root@kitploit: ███████╗ █████╗ ███████╗████████╗ ██████╗ ██████╗ ████████╗ ██╔════╝██╔══██╗██╔════╝╚══██╔══╝██╔════╝ ██╔══██╗╚══██╔══╝ █████╗ ███████║███████╗ ██║ ██║ ███╗██████╔╝ ██║ ██╔══╝ ██╔══██║╚════██║ ██║ ██║ ██║██╔═══╝ ██║ ██║ ██║ ██║███████║ ██...

9.9CVSS5.9AI score0.0042EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 4:44 a.m.6 views

cve-2024-52005-poc

CVE-2024-52005: ANSI Escape Sequence Injection in Git Overview This repository contains a Proof-of-Concept PoC demonstrating CVE-2024-52005, a vulnerability in Git that allows ANSI escape sequence injection through the sideband channel during Git operations. CVE-2024-52005 is a High severity CVSS...

8.8CVSS7.5AI score0.00513EPSS
SaveExploits1References6
Kitploit
Kitploit
added 2026/09/08 4:41 a.m.5 views

CVE-2024-21626

CVE-2024-21626 POC Requirements runc 1.1.0 = 1.1.11 Installation of vulnerable environment Deploy a VM with Ubuntu 20.04 and download Docker by following their guide root@kitploit: https://docs.docker.com/engine/install/ubuntu/ Change the patched 'runc' version in Docker to a vulnerable one...

8.6CVSS7AI score0.18087EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/09/08 4:35 a.m.4 views

WPTaskScheduler_CVE-2024-49039

WPTaskScheduler Persistence & CVE-2024-49039, as one of Attack Surface within Task Scheduler. WPTaskScheduler.dll is a component of Task Scheduler, since win 10 1507. This is likely a backdoor tool used for persistence, which was analyzed by security researchers, who found that able to bypass...

8.8CVSS8.2AI score0.14179EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/08 4:30 a.m.6 views

cve-2024-21626

CVE-2024-21626 Overview This repository contains code examples for an app vulnerable to CVE-2024-21626 as well as an eBPF gadget to detect exploitation attempts. This repoistory was created as part of this blog post. The gadget program used to detect this vulnerability is for demonstration purpos...

8.6CVSS7AI score0.18087EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/09/08 4:29 a.m.3 views

CVE-2024-39205-Pyload-RCE

CVE-2024-39205-Pyload-RCE Pyload RCE with js2py sandbox escape Summary Any pyload-ng running under python3.11 or below are vulnerable under RCE. Attacker can send a request containing any shell command and the victim server will execute it immediately. Fix Upgrade to the newest version of pyload-...

9.8CVSS8.2AI score0.16538EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/08 4:27 a.m.5 views

Docker-Escape-Miner

Using a published Docker exploit to gain root access and run a bitcoin mining script This uses two open source libraries: nightminer by @ricmoo for python bitcoin mining RunC-CVE-2019-5736 by @twistlock for the docker escape System Requirements This was tested on Kali Linux, with Docker version...

9.3CVSS7AI score0.98452EPSS
SaveExploits35
Rows per page
Query Builder