CVE-2021-26882

CVE-2021-26882 Remote Access API Elevation of Privilege Vulnerability PoC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26882 Step 1: Double-click crash.pbk. Step 2: Trigger a crash...

cve-2022-33082-exploit

CVE 2022-33082 Exploit DISCLAMER This code is provided for ETHICAL purposes - understanding the vulnerability and testing one's own systems or AUTHORIZED systems. By using this, you agree to act ethically and I hold no liability if you do not act ethically. This exploit works on Open Policy Agent...

CVE-2005-0575-knet-exploit

CVE-2005-0575 KNet Web Server 1.04b Remote Buffer Overflow SEH Exploit for x86 Windows XP SP3, this exploit needs some adjustment ! edit the code before run ! made in the past, I forgot when I made it...

CVE-2024-32002

CVE-2024-32002 Just small script to exploit CVE-2024-32002 based on CVE available How to do First, create 2 empty repos on github or gitlab. Then git clone and run script this. Finally: git clone –recursive repo2 to auto RCE...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...

ProxyLogon

ProxyLogon For Python3 ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell root@kitploit: usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists user...

C2-and-Post-Exploitation-Framework

Capstone Docker Lab Overview and Purpose The victim browses to a hosted webpage. The exploit initiates via shellcode embedded in utils.js runs client-side in the victim's browser via CVE-2021-21220. The shellcode runs on the victim's machine, calls the HTTPS delivery server, downloads...

CVE-2019-17147_Practice_Material

CVE-2019-17147PracticeMaterial This repo contains dumped flash partitions with firmware version vulnerable to CVE-2019-17147, and some useful binaries to downgrade and debug your WR841NV14 router. Doing hardware modifications such as overwriting flash chip partitions have its risks. Evaluate the...

CVE-2024-26229-exploit

CVE-2024-26229 Windows LPE This repository is a rewrite of the code from here, but without additional dependencies. PATCHED: Apr 9, 2024...

CVE-2020-14947

CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

CVE-2023-28121

CVE-2023-28121 WooCommerce Payments: Unauthorized Admin Access Exploit Won't be publishing this one first... thats for sure.. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2022-22963

CVE-2022-22963 Remote Code Execution exploiting CVE-2022-22963 attacking Spring Cloud service. Disclamier: This is for educational purposes only. The author is not responsible for the use of this program. Use under your own risk Usage root@kitploit: ./CVE-2022-22963 -h Usage: CVE-2022-22963 OPTIO...

libfutex_exploit

This repository does not have a README...

CVE-2024-40431-CVE-2022-25479-EOP-CHAIN

CVE-2024-40431+CVE-2022-25479 chain for EOPDATA ONLY ATTACK A wise man said once "that rent is too damn high" and "give credit where credit is due" such shoutout to https://x.com/zwclose for finding and publishing a poc for these 2 bugs. Wereubensammut and vladupon asking him nicesly mearly tweak...

heap-viewer

HeapViewer Un plugin de IDA Pro para examinar el heap, enfocado en el desarrollo de exploits. Actualmente soporta la implementación malloc de glibc ptmalloc2. Ganador del tercer lugar del concurso de plugins Hex-Rays 2018 Requisitos IDA Pro = 7.0 Probado en glibc 2.23 = 2.26 GraphView para listas...

heap-viewer

HeapViewer An IDA Pro plugin to examine the heap, focused on exploit development. Currently supports the glibc malloc implementation ptmalloc2. 3rd place winner of the 2018 Hex-Rays Plugin Contest Requirements IDA Pro = 7.0 Tested on glibc 2.23 = 2.26 GraphView for linked lists bins/tcache Struct...

cve-2022-23134-poc-and-writeup

CVE-2022-23134 Writeup and POC This is a POC and writeup for CVE-2022-23134 in particular versions of Zabbix. Please read writeup.md on the details needed to use the exploit - it does require some setup of MySQL!...

cve-2023-38831

CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.win-rar.com/ Usage: root@kitploit: python3 cve-2023-38831.py filename payloadname archivename Refs: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ https://xakep.ru/2023/08/24/winrar-0day/ Telegram: https://t.me/ptsoft...