CVE-2025-5777-Exploit

CVE-2025-5777 Exploit Tool 🔥 A powerful educational tool designed to demonstrate and analyze the vulnerability CVE-2025-5777 affecting Citrix NetScaler VPN. This project is part of the GO-TO CVE initiative. ⚠️ For educational purposes only. Do NOT use this on systems you don't own or have explicit...

CVE-2024-3094_xz_check

CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit Proof of Concept tool for extracting users and password hashes via the CVE-2026-63030 wp2shell vulnerability. Vulnerability Information CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 Type : Pre-Auth...

Cisco-UCM-SQLi-Scripts

CVE-2019-15972 Cisco UCM SQLi Scripts Scripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager UCM. Enumerate tables - enumerate all tables on the underlying database and place the table names in a text file Extract tables - take the...

Cisco-Smart-Exploit

Cisco-Smart-Exploit Cisco SmartInstall Exploit CVE-2018-0171 Inspired from C. Papathanasiou PoC This Python 3 script uses port 4786 on a Cisco device running SmartInstall to exploit CVE-2018-0171. With the use of this exploit, an attacker can craft a payload, send it to the Cisco device, and then...

FollinaExtractor

FollinaExtractor Extract payload URLs from Follina CVE-2022-30190 docx and rtf files usage: extractfollina.py -f C:\path\to\file.rtf...

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

pwn-pulse

pwn-pulse.sh Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability CVE-2019-11510 Script authored by braindead @BishopFox. Based on research by Orange Tsai and Meh Chang. Thanks also to Alyssa Herrera and 0xDezzy for additional insights. Huge thanks to bl4ckh0l3z for fixing,...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP Extraction and .library-ms File Windows Explorer automatically initiates an SMB authentication request when a .library-ms file is extracted from a .rar archive, leading to NTLM hash disclosure. The user does not need to open or execute...

CVE-2026-77697

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

CVE-2026-77697

ManageEngine Endpoint Central (by Zohocorp) versions below 11.4.2540.23 are affected by a Privilege Escalation vulnerability during JAR extraction. The flaw allows a locally authenticated user with low privileges to escalate their permissions, with changed scope impacting the confidentiality, int...

EUVD-2026-72340

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 is a vulnerability in Python’s tarfile module that allows arbitrary file writes outside the extraction directory when extracting untrusted tar archives. The issue occurs when using TarFile.extract or TarFile.extractall with filter="data" or filter="tar", which does...

lehack-2026-challenge

LeHack 2026 Challenge A 3-tier challenge demonstrating impact of direct disk mounting. Challenge Overview Level| Goal| Technique ---|---|--- 1| Access the unencrypted disk| Set boot cmdline to init=/bin/bash in grub 2| Crack vault1 LUKS| Extract header → hashcat → unlock & mount vault 3| Crack...

CVE-2025-65320

CVE-2025-65320 Title Cleartext Storage of Sensitive Licensing Material in Process Memory in Abacre Restaurant Point of Sale POS Overview A vulnerability exists in Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 where sensitive licensing data is stored in cleartext in process memory...

joomla.3.7.0exploit

CVE-2017-8917 Joomla SQLi PoC This repository contains a simple, CTF-friendly proof of concept PoC for the Joomla comfields SQL injection vulnerability CVE-2017-8917. The goal is to keep the workflow lightweight while still showing the full exploitation flow: detection, enumeration, and data...

weape

wEAPe 无线EAP提取器脚本（Weape） ============================================ 自动提取EAP 802.1x用户名 由Daniel Compton在Info-Assure Ltd开发 https://github.com/commonexploits/weape.git 安装 root@kitploit: git clone https://github.com/commonexploits/weape.git 使用方法 root@kitploit: ./weape.sh 功能 将无线网卡设置为监听模式 列出所有接入点（AP）...

CVE-2026-64824-PoC

CVE-2026-64824 — Home Assistant Core Backup-Restore Symlink Path Traversal → RCE CVSS 8.4 Critical · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Authenticated admin attacker uploads a crafted backup tar. The restore path extracts the inner homeassistant.tar.gz with filter="fullytrusted" and only...

bin2shell

bin2shell bin2shell is very small utils for extract shell code from the binary file root@kitploit: bash bin2shell.sh additionNum \x45\x6e\x74\x65\x72\x20\x4e\x75\x6d\x62\x65\x72\x20\x31\x20\x3a\x20\x45\x6e\x74\x65\x72\x20\x4e\x75\x6d THANK YOU TOUHID SHAIKH...