CVE-2025-46817-PoC

CVE-2025-46817 Redis Integer Overflow Exploit A lightweight C implementation of the CVE-2025-46817 exploit for Redis integer overflow vulnerability. 🚀 Features Lightweight : Single C file, no external dependencies beyond hiredis Fast : Native compilation for maximum performance Colorful Output :...

CVE-2023-50164-PoC

CVE-2023-50164 Apache Struts path traversal to RCE vulnerability - Proof of Concept This PoC has been made to test an RCE Remote Code Execution by exploiting the Apache Struts2 vulnerability. Build the image and run a container: root@kitploit: $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc ...

CVE-2026-29781

Architectural vulnerability in the Sliver C2 server allows for Reverse-C2 Weaponization. By extracting credentials from a captured implant, a defender can weaponize the C2 relationship to trigger a remote Infrastructure Kill-Switch. This exploitation targets a systemic lack of nil-pointer...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit A small Python test client to send HTTP GET requests with an oversized Authorization: Basic header. This tool is intended for lab testing and research into header-parsing issues e.g., null-dereference / crash bugs such as CVE-2025-4476 in libsoup. It demonstrates how a...

CVE-2026-32202

Disclaimer This tool is for authorized red teaming and penetration testing only. Unauthorized use against systems without explicit permission is illegal. Use at your own risk. The author assumes no liability for any misuse or damage. Description NTLMv2 hash coercion via incomplete Windows Shell...

CVE-2025-32463

CVE-2025-32463 Vulnerable: sudo 1.9.14, 1.9.15, 1.9.16, 1.9.17 - Patched in: sudo 1.9.17p1 and later - Legacy versions older than 1.9.14 are not affected, as they don't support the --chroot option. root@kitploit: getroot.sh and getroot.py do the same thing. git clone...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n RCE Exploit Unauthenticated RCE chain for n8n 1.121.0 CVSS 10.0 Attack Chain 1. CVE-2026-21858 - Content-Type confusion → read /home/node/.n8n/config and database.sqlite 2. Extract encryption key and admin credentials from files 3. Forge admin JWT token 4...

log4j_github_repository

This work includes testing and improvement tools for CVE-2021-44228log4j The purpose of this study is to list useful tools that the blue and red team can use against the Log4j vulnerability. Github links bypass tools, scanning, detection mechanisms, etc. can be used for. Scanning or POC 🔴 Title:...

CVE-2026-31431-CopyFail-Universal-LPE

CVE-2026-31431 "Copy Fail" — Universal LPE Exploit Linux kernel page cache 4-byte arbitrary write → Local Privilege Escalation Multiple exploit approaches: dynamic ELF entry point overwrite, full binary replacement, Python 3.x compatible with ctypes splice fallback. What is this? CVE-2026-31431 i...

copyfail-rs

copyfail-rs Copy Fail exploit CVE-2026-31431 but in Rust, a critical vulnerability chaining AFALG and splice to achieve a 4-byte page cache write, leading to local privilege escalation on major Linux distributions. Based on the research and PoC by Xint Code. Disclaimer !CAUTION This project is fo...

CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server Detection Toolkit Safe, non-exploitative detection tools for identifying Oracle HTTP Server and WebLogic Proxy Plug-in instances affected by CVE-2026-21962. 🧠 Vulnerability Overview CVE: CVE-2026-21962 Severity: Critical Attack Vector: Network Authentication...

CVE-2025-56223

CVE-2025-56223 Denial of Service – Upload Document API Description An attacker can rapidly upload a large volume of files to cause denial of service. CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yazan Abu-Nadi...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

cve-2026-31431

CVE-2026-31431 Copy Fail Test This repository contains a workflow file for GitHub Actions to test whether the action runner is affected by CVE-2026-31431. You can do the test by yourself, just create a repository by this template and trigger the test.yml workflow manually remember to change the o...

wonderplugin

Wonderplugin For RCE DONT USE THIS FAKE PLUGIN ON YOUR PRODUCTION WEB SERVER! This repository purposed for test a vulnerability on wonderCMS, this fake plugin contain backdoor web shell, you can find it on evil.php file. Related Article WonderCMS 3.1.3 - Authenticated RCE & Blind SSRF Vulnerabili...

CVE-2023-51126

CVE-2023-51126 FLIR AX8 up to 1.46.16 is vulnerable to command injection via /usr/www/res.php. VulnerabilityType Other command injection Vendor of Product FLIR Affected Component in /usr/www/res.php. The parameter value can inject the command and exec it. Attack Type Remote Impact Code execution...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 bytes. Any distro. Root. A straight-line logic flaw in the Linux kernel's authencesn cryptographic template enables an unprivileged local user to perform a precise, controlled 4-byte write into the page cache of any readable file — including setuid binaries. No race...

CVE-2025-32463

CVE-2025-32463 - Setup and Execution Guide This is the first time I’ve ported a malicious exploit into a Nuclei template for a non-intrusive vulnerability scan that still demonstrates the underlying issue. I documented the process in more detail expressly as a learning exercise. My main challenge...