229157 matches found
htb-wifinetictwo-exploit
CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...
CVE-2023-22518
CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: root@kitploit: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: root@kitploit: python3...
CVE-2025-14847_Expolit
This repository does not have a README...
CVE-2026-23744
CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: root@kitploit: python3 cve-2026-23744.py --target https:// --att-ip --att-p...
cve-2016-0095-x64
cve-2016-0095-x64 windows 7 Ultimate Ultimate x64 poc of cve-2016-0095MS16-034 A newbie starts learning cve, referencing: https://whereisk0shl.top/ssctfpwn450windowskernelexploitationwriteup.html and the code from expert k0shl at https://github.com/k0keoyo/SSCTF-pwn450-ms16-034-writeup. Modified ...
apache-struts2-CVE-2017-5638
apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...
ronin
ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...
padre
padre padre is an advanced exploiter for Padding Oracle attacks against CBC mode encryption Features: blazing fast, concurrent implementation decryption of tokens encryption of arbitrary data automatic fingerprinting of padding oracles automatic detection of cipher block length HINTS! if failure...
RCE-Exploit-Bolt-3.7.0-CVE-2020-4040-4041
This repository does not have a README...
cve-2023-29360
PoC for CVE-2023-29360 Exploit targeting MSKSSRV.SYS driver Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Thomas Imbert @masthoon from Synacktiv @Synacktiv...
sudo-CVE-2017-1000367
sudo-CVE-2017-1000367 http://www.openwall.com/lists/oss-security/2017/05/30/16 Compile: gcc -o sudopwn sudopwn.c -lutil Disclaimer: I had no clue what I was doing ;- Requirements System must be selinux-enabled sudo needs to be built with selinux support sudo -r User needs to have sudo permissions...
MetasploitMCP
Metasploit MCP Server A Model Context Protocol MCP server for Metasploit Framework integration. https://github.com/user-attachments/assets/39b19fb5-8397-4ccd-b896-d1797ec185e1 Description This MCP server provides a bridge between large language models like Claude and the Metasploit Framework...
CVE-2021-4034
CVE-2021-4034 self contained bash script, just run and pwn! with reference to Qualys' blog post https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...
VirtualBox-6.0.0-Exploit-1-day
VirtualBox 6.0.0 Exploit 1-day VBox bugs to be used CVE-2019-2525 : crUnpackExtendGetAttribLocation Information Disclosure CVE-2019-2548 : crServerDispatchReadPixels Integer overflow, leading to Heap overflow these bugs can be triggered when 3D Acceleration is enabled. First, before the...
CVE-2022-22965-Spring-Core-Rce
Spring-Core JDK9+ RCE Usage Instructions root@kitploit: ╰─ ./CVE-2022-22965 -h ─╯ Single target: ./CVE-2022-22965 -u http://127.0.0.1:8080 Batch scan: ./CVE-2022-22965 -l url.txt Local Vulnerability Testing 0x01 Docker Image root@kitploit: docker pull vulfocus/spring-core-rce-2022-03-29 docker ru...
CVE-2016-7255
CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...
CVE-2014-3704
Code Conversion to Python 3 This code is taken from "Drupal 7.0 7.31 - 'Drupalgeddon' SQL Injection Add Admin User" and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Drupal". The original code was written in Python 2,...
MinIO_CVE-2023-28432_EXP
This repository does not have a README...
CVE-2022-24434_POC
CVE-2022-24434 – PoC for Dicer This repository contains a Proof-of-Concept PoC for CVE-2022-24434 , a vulnerability affecting the Dicer npm package. PoC target version: 0.3.1 ensure the dicer code used is exactly v0.3.1 📂 Project Structure Make sure the directory is structured like this: . ├──...
gadgetinspector
Gadget Inspector This project inspects Java libraries and classpaths for gadget chains. Gadgets chains are used to construct exploits for deserialization vulnerabilities. By automatically discovering possible gadgets chains in an application's classpath penetration testers can quickly construct...