xeca

xeca xeca is a project that creates encrypted PowerShell payloads for offensive purposes. Creating position independent shellcode from DLL files is also possible. Note: Please place your custom AMSI bypass in src/assets/amsi-bypass.ps1. Table of Contents xeca Install How It Works Mitigations...

CVE-2026-42271-PoC

CVE-2026-42271 — LiteLLM Authenticated Command Injection via MCP stdio Test Endpoints LiteLLM POST /mcp-rest/test/connection & POST /mcp-rest/test/tools/list — Authenticated command injection via MCP stdio transport. Any valid API key can execute arbitrary OS commands as root in default Docker...

NetLogic

NetLogic 云原生攻击面映射器与漏洞关联器 — v3.0 NetLogic 是一个网络安全平台，结合了主动端口扫描、CVE 关联（实时 NVD API）、SSL/TLS 分析、HTTP 安全审计、DNS/电子邮件安全评估、子域名接管检测、被动 OSINT、主动漏洞探测、AI 驱动推理引擎、跨主机攻击链发现以及深度探测代理架构——以 Web 应用 形式交付（React 仪表盘 + FastAPI）。核心扫描引擎纯 Python 3.9+ 标准库实现，无第三方依赖。 Features 模块| 描述 ---|--- Port Scanner| TCP 连接扫描，支持 43/58 个端口、...

CVE-2021-3156

CVE-2021-3156 sudo堆溢出实现本地权限提升，Go语言版 基于 blasty的漏洞利用...

DBShield

DBShield Protects your data by inspecting incoming queries from your application server and rejecting abnormal ones. How it works? For example, this is how web server normally interacts with database server: By adding DBShield in front of database server we can protect it against abnormal queries...

CVE-2023-33538

Python Exploit for TP-Link TL-WR940N/TL-WR841N Command Injection Vulnerability Usage Instructions 1. Basic Vulnerability Check : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. Execute Custom Command : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p...

Inline-Execute-PE

Inline-Execute-PE DISCLAIMER: This project is complex and failure to understand how it works and adequately test it can result in you crashing Beacons and losing access! I highly encourage you to read all of the documentation up until the "Design Considerations and Commentary" section! Introducti...

CVE-2020-17530

S2-061 脚本皆根据vulhub的struts2-059/061漏洞测试环境来写的，不具普遍性，还望大佬多多指教 struts2-061-poc.py（可执行简单系统命令） 用法：python struts2-061-poc.py http://ip:port command 例子：python struts2-061-poc.py http://192.168.0.7:8080 whoami S2-061-shell.py（可反弹shell） 用法： 1. 首先在一台机器A上监听指定端口例如：nc -lvvp 7777） 2. 执行脚本：python2 S2-061-shell.p...

CVE-2024-2432-PaloAlto-GlobalProtect-EoP

CVE-2024-2432 Palo Alto GlobalProtect EoP On Windows system, it was found that GlobalProtect App version 6.1.1-5 and 6.2.0-89 was vulnerable to arbitrary file delete with elevated privileges by symbolic link attack lead to local privilege escalation on local machine. It was observed that when a...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

bluemonday

bluemonday bluemonday 是一个用 Go 实现的 HTML 净化器。它速度快且高度可配置。 bluemonday 将不受信任的用户生成内容作为输入，并返回已根据一份经批准的 HTML 元素和属性的允许列表进行净化后的 HTML，从而使你可以安全地将这些内容包含在你的网页中。 如果你接受用户生成的内容，并且你的服务器使用 Go，那么你需要 bluemonday。 用于用户生成内容的默认策略（bluemonday.UGCPolicy.Sanitize）会将下面这个： root@kitploit: Hello...

CVE-2026-43499

CVE-2026-43499 ⚡ 简单用法 请仅在安全且经过授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 获得授权的渗透测试环境 示例搭建： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash / WSL sour...

CVE-2019-2725

CVE-2019-2725 CVE-2019-2725 CNVD-C-2019-48814, WebLogic wls9-async Command Echo 10.3.6 12.1.3 ResultBaseExec.java Used for testing defineClass. It will recover the malicious class from base64 and execute the code, mainly for convenience optional. JDK7u21.java Generates the XML in...

CVE-2024-3400-Checker

CVE-2024-3400-Checker 中文版本 A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Usage: 1. Install requirements. root@kitploit: python3 -m pip install -r requirements.txt 2. Run root@kitploit: python3 main.py 3. Set threads in main.py, default is 20...

CVE-2022-0847-Exploit-Implementation

CVE-2022-0847-Exploit-Implementation This is a POC showing how to pop a reverse bash shell for arbitrary code execution on a foreign machine using CVE-2022-0847, "Dirty Pipe Exploit". This vulnerability only affects Linux kernel versions 5.8 or newer but was patched in versions 5.16.11, 5.15.25,...

SetupHijack

SetupHijack Overview SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacke...

CVE-2022-22947-

CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expression injection command execution（CVE-2022-22947） Inject Godzilla memory shell Default key pass base64 Note: the code does not clear the route part, please clear it yourself.. Test environment:...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2015-10141

CVE-2015-10141 root@kitploit: Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 Explanation An...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...