Webmin_CVE-2019-15107

CVE-2019–15107 - Unauthenticated RCE Webmin =1.920 This python script should give you a root shell on Webmin 1.890 Check with nmap: nmap -sC -sV -p 10000 TARGETIP Result: 10000/tcp open http MiniServ 1.890 Webmin httpd How to use this exploit: Step 1: nc -lnvp LPORT Step 2: chmod +x exploit.py...

CVE-2023-7028

CVE-2023-7028lab Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week. This repository contains a Docker setup and a Python script to test the CVE-2023-7028 vulnerability in GitLab. The provided script automates the...

CVE-2020-16938

CVE-2020-16938 CVE-2020-16938 is a vulnerability that allows you to get unrestricted file read capabilities on the entire disk as unprivileged user. The bug was originally found and reported by my friend Jonas. His PoC can be found here. My version of the exploit consists of a bunch of Windows AP...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-attack-and-security-mechanism In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it. Introduction Cyber-attacks have become a critical challenge for both companies and small businesses, largely due to vulnerabilitie...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty Pipe is a kind of Linux exploit. Its CVE is CVE 2022-0847. We use it to delete all files on your Ubuntu. Environment: Ubuntu 20.04 Linux Kernel 5.8 This is the ova file of Ubuntu 20.04:...

PwnXSS

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 root@kitploit: pip install bs4 requests root@kitploit: pip install requests python 3.7 Commands: root@kitploit: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usag...

CVE-2025-46204

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify course details via the /course/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this flaw allows unauthorized manipulation...

CVE-2025-46203

Description Unifiedtransform v2.0 is vulnerable to Incorrect Access Control. Any user students and teachers can access and modify student records via the /students/edit/id endpoints. This functionality intended exclusively for administrative use. Exploiting this vulnerability can lead to...

avml

AVML Adquisición de memoria volátil para Linux Resumen Una herramienta portátil de adquisición de memoria volátil para Linux. AVML es una herramienta de adquisición de memoria volátil en el espacio de usuario userland para X8664, escrita en Rust, pensada para desplegarse como un binario estático...

powersap

PowerSAP PowerSAP es una reimplementación simple en PowerShell de técnicas populares y efectivas de todas las herramientas públicas como Bizploit, módulos auxiliares de Metasploit o scripts de Python disponibles en Internet. Esta reimplementación no contiene ninguna vulnerabilidad nueva o no...

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

magicRecon

MagicRecon: Fast, simple and effective MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats. With Magic Recon you...

CVE-2021-41773

CVE-2021-41773 Usage root@kitploit: docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py root@kitploit: docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py What is CVE-2021-41773? CVE-2021-41773 Directory traversal vulnerability in Apache HTTP Server...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX test struts2 vulnerability CVE-2017-5638 in Mac OS X download test web app and run it in tomcat root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF...

HLF_TxTime_spoofing

HLFTxTimespoofing HLFTxTimespoofing - a PoC covering the problem of transaction time manipulation using GetTxTimestamp or GetHistoryForKey in the Hyperledger Fabric blockchain. Tested on v 2.5.5 and v3.0.0-beta The project consists of several parts: 1. timeinsecure - vulnerable chaincode variant...

hibernate-orm

Hibernate ORM is a library providing Object/Relational Mapping ORM support to applications, libraries, and frameworks. It also provides an implementation of the JPA specification, which is the standard Java specification for ORM. This is the repository of its source code: see Hibernate.org for...

CVE-2022-26134

POC - Atlassian Confluence OGNL Injection Remote Code Execution RCE Vulnerability CVE-2022-26134 Tested on Confluence Version 7.13.6 Setting up environment Clone the repository root@kitploit: docker-compose up -d On http://localhost:8090 you shall see confluence up and running. Next, get an...

apache_kylin

Apache Kylin Codacy Badge Extreme OLAP Engine for Big Data Apache Kylin is an open source Distributed Analytics Engine, contributed by eBay Inc., provides SQL interface and multi-dimensional analysis OLAP on Hadoop supporting extremely large datasets. For more details, see the website...

CVE-2025-61148

CVE-2025-61148 The vulnerability exists in the Student Payment API. The application fails to properly validate whether the user requesting a receipt is authorized to view it. By modifying the recno parameter in the API request, an attacker can access the receipts of other users. CVE-2025-61148:...

cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...