MACHINE-BASIC-PENTESTING-1

Penetration Testing Assessment Report: Basic Pentesting 1 !R...

cve-2025-32433_rce_exploit

Erlang/OTP SSH – CVE-2025-32433 TryHackMe Lab ⚠️ Educational Use Only This project is strictly for learning and lab practice on the official TryHackMe room: https://tryhackme.com/room/erlangotpsshcve202532433 Do not use this tool against systems you do not own or have explicit permission to test...

ODH-BricksBuilder-CVE-2024-25600-THM

ODH-BricksBuilder-CVE-2024-25600-THM Overview This repository hosts a Python-based vulnerability scanner developed by Oblivion Development & Hosting OD&H to detect CVE-2024-25600 in the Bricks Builder plugin for WordPress. This tool is designed primarily for use within Try Hack Me THM exercises,...

CVE-2020-17456

Description On August 21, 2020, seown SLC 130 router was exposed to have an authentication rce vulnerability. The vulnerability number is cve-2020-17456. The vulnerability is due to the ping command injection in the router's Web service diagnosis function. Combined with several groups of hard cod...

rocketcat-cve-2021-22911-exploit

Rocket.Chat CVE-2021-22911 漏洞利用 ⚠️ 免责声明——仅供教育用途 此漏洞利用仅供授权的渗透测试和教育目的 。未经授权访问计算机系统是非法的。作者对任何滥用行为不承担责任。 📋 概述 CVE-2021-22911 是 Rocket.Chat 中一个严重的未经认证的 NoSQL 注入漏洞，可导致远程代码执行（RCE）。 CVSS 评分： 9.8（严重） 受影响版本： Rocket.Chat 3.12.7 攻击向量： 网络 / 未认证 影响： 完全系统沦陷 🎯 漏洞详情 此漏洞利用串联了三次 NoSQL 注入攻击： 阶段 1：低权限用户密码重置...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...

CVE-2026-86220

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqliquery of the file /admin/modaladdcourse.php. The manipulation of the argument course results in sql injection. The attack can be launched remotely. The exploit is now...

Exploits_CVE-2019-19781

Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh...

EUVD-2026-72170

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqliquery of the file /admin/modaladdcourse1.php. This manipulation of the argument course causes sql injection. The attack may be initiated remotely. The exploit has been publish...

CVE-2026-86221

SourceCodester Class and Exam Timetabling System 1.0 is affected by a SQL injection in the mysqli_query function within /admin/modal_add_course1.php , triggered by manipulation of the course argument. The attack can be initiated remotely without authentication. The exploit has been published with...

CVE-2026-86221 SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection

A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqliquery of the file /admin/modaladdcourse1.php. This manipulation of the argument course causes sql injection. The attack may be initiated remotely. The exploit has been publish...

CVE-2020-0796-SMBGhost-Exploit-Demo

CVE-2020-0796 Exploit Demo SMBGhost This project demonstrates a proof-of-concept PoC exploit of CVE-2020-0796, also known as SMBGhost - a critical pre-auth RCE vulnerability affecting Windows 10 and Windows Server systems using SMBv3. This was developed as part of a school cybersecurity project...

Rig-Exploit-for-CVE-2018-8174

Rig-Exploit-for-CVE-2018-8174 针对CVE-2018-8174的Rig漏洞利用。与之前的活动一样，Rig的Seamless活动使用恶意广告。这种情况下，恶意广告包含一个隐藏的iframe，将受害者重定向到Rig的着陆页，该页面包含针对CVE-2018-8174的漏洞利用代码和shellcode。这能够对着陆页中混淆的shellcode实现远程代码执行。成功利用后，会检索一个第二阶段下载器，根据URL来看似乎是SmokeLoader的一个变种。随后它会下载最终载荷——一个门罗币矿工。...

JNDI-Exploit-1.2-log4shell

JNDI-Exploit-1.2-log4shell Details : CVE-2021-44228 Usage : root@kitploit: ----------------------------------------------------- java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip Local ip address -l, --ldapPort Ldap bind port default: 1389 -p, --httpPort Http bind port default: 8080 -u, --usag...

CVE-2023-52927

CVE-2023-52927 CVE-2023-52927 的本地权限提升漏洞利用——netfilter 中的释放后使用漏洞。 我的漏洞分析文章：CVE-2023-52927 - 将遗忘的 Syzkaller 报告转化为 kCTF 漏洞利用 重现代码：KASAN 触发 POC 构建 安装依赖： root@kitploit: make prerequisites 构建漏洞利用： root@kitploit: make exploit 目标 kCTF cos-109-17800.436.33 机器： 内核镜像...

php_filter_chain_oracle_poc

phpfilterchainoraclepoc Overview The Synacktiv team published an in-depth research article, PHP Filter Chains: File Read from Error-Based Oracle , initially disclosed at DownUnder CTF 2022. This research was based on a challenge by @hashkitten, where players were tasked with leaking the /flag fil...

Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC Este paquete permite: 1. Subir webshell a SharePoint 2. Extraer ValidationKey 3. Generar ViewState firmado 4. RCE mediante shell reversa/vinculada 🔧 Configuración root@kitploit: git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Ejecución Subi...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI 页面构建器 = 2.5.1 - 本地文件包含 LFI 漏洞利用 概述 CVE-2025-2294 影响 WordPress 的 Kubio AI 页面构建器 插件（版本 2.5.1 及以下）。该插件通过 thekubiohybridthemeloadtemplate 函数存在一个未经认证的本地文件包含 LFI 漏洞。 此漏洞允许攻击者在易受攻击的 WordPress 服务器上包含并执行任意文件，可能导致： 绕过访问控制 读取敏感服务器文件 远程代码执行（如果攻击者能够上传伪装成安全文件类型的恶意 PHP 文件） 漏洞详...

CVE-2002-1614

CVE-2002-1614 Este exploit se usa con fines educativos o para tu proceso de pentesting legal. Fuente: https://www.exploit-db.com/exploits/281 Compilar gcc exploit.c Archivo de salida: a.out Uso Permiso de ejecución: chmod +x a.out Ejecución: ./a.out...

Zero-day-scanning

zeroscan Zeroscan is a Domain Controller vulnerability scanner, that currently includes checks for Zerologon CVE-2020-1472, MS-PAR/MS-RPRN and SMBv2 Signing. CVE-2020-1472: Uses a built-in script to check for Zerologon CVE-2020-1472, but does NOT attempt to exploit the target, it is simply a...