Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

Joomla! Component Jw_allVideos - Arbitrary File Retrieval

A directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter. id: CVE-2010-0696 info: name: Joomla! Component...

WordPress Simple Job Board <2.9.4 - Local File Inclusion

WordPress Simple Job Board prior to version 2.9.4 is vulnerable to arbitrary file retrieval vulnerabilities because it does not validate the sjbfile parameter when viewing a resume, allowing an authenticated user with the downloadresume capability such as HR users to download arbitrary files from...

WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval

WordPress Email Subscribers & Newsletters plugin before 4.2.3 is susceptible to arbitrary file retrieval via a flaw that allows unauthenticated file download and user information disclosure. An attacker can obtain sensitive information, modify data, and/or execute unauthorized administrative...

Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. id: CVE-2020-29453 info: name: Jira Server Pre-Auth - Arbitrary File...

CVE-2024-24919

Exploit POC de Checkpoint con fines de prueba para recuperar archivos sensibles de Checkpoint basado en este artículo: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ No soy responsable de ningún uso indebido de este script; la intención aquí es que los defensores prueben...

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: root@kitploit: --host Mandatory - our IP address for reverse connections...

CVE-2018-8097-PoC

CVE-2018-8097 PoC para CVE-2018-8097. Este script explota CVE-2018-8097 y puede recuperar archivos y contenidos mediante un método de ejecución remota de código RCE ciega basada en tiempo. Uso root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h...

SMBCrunch

SMBCrunch One of the most time consuming tasks as a red teamer is diving into filesystems and shares, attempting to identify any potentially sensitive information. SMBCrunch allows a red teamer to quickly identify Windows File Shares in a network, performs a recursive directory listing of the...

ExploitWebmin

Script Webmin Proyecto creado por: Gabriel Jose. Script en Python para explotar la vulnerabilidad de Webmin cve-2006-3392 Ejemplo de uso ./exploitWebmin.py -pt http -t host -p port -f file root@kitploit: ./exploitWebmin.py -pt http -t 127.0.0.1 -p 10000 -f /etc/passwd...

CVE-2024-55557

CVE-2024-55557 Uso root@kitploit: python3 exploit.py --local retrieve from local readable files python3 exploit.py default mode is remote Más Leer más sobre CVE-2024-55557 - Weasis 4.5.1 POC https://github.com/user-attachments/assets/a3f64a58-7720-4f93-8bcc-9393d8afcb68...

ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval

ManageEngine ServiceDesk 9.3.9328 is vulnerable to an arbitrary file retrieval due to improper restrictions of the pathname used in the name parameter for the download-snapshot path. An unauthenticated remote attacker can use this vulnerability to download arbitrary files. id: CVE-2017-11512 info...

CVE-2026-82582

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature...

CVE-2026-82582

An authorization bypass vulnerability in SHIRASAGI groupware allows an attacker with low privileges to retrieve files from the shared file feature by manipulating a user-controlled key. The root cause is the reliance on a user-supplied key for access control in the shared file module, enabling un...

CVE-2026-82582

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature...

EUVD-2026-75272

An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature...

modsecurity-backdoor

Puerta Trasera de ModSecurity Descripción Esta es una prueba de concepto de un software malicioso que se ejecuta dentro del WAF ModSecurity. El software tiene dos funciones principales: Obtener el contenido de archivos. Ejecutar comandos y obtener su salida shell remota. Además, incluye estas...

Myesve

myesve CVE-2024-38475 Exploitation Framework – Version 1.0 Disclaimer: This tool is intended for authorized security testing, educational research, and legitimate bug bounty programs only. Do not use it against systems you do not own or lack explicit permission to test. The authors assume no...

CVE-2025-60574

취약점 발견자 및 익스플로잇 작성자 Stefano Andreatta & Jacopo Candido Augelli CVE-2025-60574 취약점 설명 tQuadra CMS 4.2.1117에서 로컬 파일 포함LFI 취약점이 확인되었습니다. 이 문제는 "/styles/" 경로에 존재하며, 사용자가 제공한 입력을 적절히 검증하지 않습니다. 공격자는 조작된 GET 요청을 보내 기본 시스템에서 임의의 파일을 검색할 수 있습니다. 발견자: Stefano Andreatta & Jacopo Candido Augelli CVSS 3.1 -...

CVE-2016-5639

CVE-2016-5639 Módulos de Metasploit para Crestron AirMedia AM-100: Traversal y Hashdump Dos módulos similares que aprovechan CVE-2016-5639 para volcar hashes y recuperar archivos mediante traversal de rutas. Hice estos módulos por separado porque quería experiencia escribiendo algo que pudiera...