Cisco-Smart-Exploit

Cisco-Smart-Exploit Cisco SmartInstall Exploit CVE-2018-0171 Inspired from C. Papathanasiou PoC This Python 3 script uses port 4786 on a Cisco device running SmartInstall to exploit CVE-2018-0171. With the use of this exploit, an attacker can craft a payload, send it to the Cisco device, and then...

follina

follina POC All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools MSDT on Office apps such as Word. This is a very simple POC, feel free to check the sources below for more threat intelligence. Usage root@kitploit: usage: follina.py -h...

Polkit-CVE-2021-3560

Polkit-CVE-2021-3560 Background In early 2021 a researcher named Kevin Backhouse discovered a seven year old privilege escalation vulnerability since designated CVE-2021-3560 in the Linux polkit utility. Fortunately, different distributions of Linux and even different versions of the same...

-CVE-2017-9805

Vulnerability information Resources: https://vulners.com/cve/CVE-2017-9805 What is this? A python exploit script capable of executing remote commands into the shell of a system hosting a Struts2 vulnerable to S2-052. Usage ╭─root@blackshell / ╰─ python s2-052.py --target...

f5_rce_poc

Usage root@kitploit: python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: root@kitploit: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates:...

CVE-2021-26295

CVE-2021-26295-POC Vulnerability verification for CVE-2021-26295 using DNSlog. Usage poc: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot generate the payload properly exp: python exp.py https://baidu.com then enter the command executio...

CVE-2020-1493

CVE-2020-1493 This vulnerability occurs in Outlook 2019 16.0.12624.20424 installed on Windows 10 1909 x64, Also This vulnerability is zero click vulnerability. TLDR; I found this bug usng winafl fuzzer. This bug occured when parsing ms-tnef file. that attachement of eml file. vulnerable method re...

CVE-2020-17530

What's this This is a Simple test Project for S2-061 which can be used to analysis the detail of this vulnerability. How to use Step 1:Use IDEA import this project Step 2:setup tomcat Server Step 3:Use browser access...

CVE-2026-42271-PoC

CVE-2026-42271 — LiteLLM Authenticated Command Injection via MCP stdio Test Endpoints LiteLLM POST /mcp-rest/test/connection & POST /mcp-rest/test/tools/list — Authenticated command injection via MCP stdio transport. Any valid API key can execute arbitrary OS commands as root in default Docker...

android-kernel-exploitation-lab

Android Kernel Exploitation Lab This lab guides you through setting up an environment to explore CVE-2019-2215, a critical Android kernel vulnerability in the binder subsystem. Documentation Environment Setup Kernel privesc with gdb script Fuzzing with syzkaller Fuzzing with AFL++ Technical...

coldfusion-10-11-xss

ColdFusion 10.x 11.x XSS - RCE PoC Exploits This repo contains XSS vectors for CVE-2015-0345 APSB15-07 that allow for the ability to gain remote command execution on ColdFusion installations. This exploit is only valid for ColdFusion 10 and 11 installations. Specifically, ColdFusion 11, Update 11...

CVE-2020-17530

S2-061 The scripts are written based on the struts2-059/061 vulnerability test environment from vulhub, and are not universally applicable. Feedback from experienced individuals is welcome. struts2-061-poc.py can execute simple system commands Usage: python struts2-061-poc.py http://ip:port comma...

CVE-2026-43499

CVE-2026-43499 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual...

threatDemos

🚨 Android Security Threat Demonstrations Repository A comprehensive collection of proof-of-concept Android security vulnerabilities and attack vectors This repository serves as an educational resource showcasing real-world Android security threats and their corresponding mitigation strategies. Ea...

CVE-2015-10141

CVE-2015-10141 root@kitploit: Exploit Title: xdebug Unauthenticated Command Execution Exploit Author: D3Ext Vendor Homepage: https://xdebug.org/ Sofware Link: https://pecl.php.net/package/xdebug/2.5.5/windows Version: 2.5.5 Tested on: Kali Linux 2025 CVE: CVE-2015-10141 Explanation An...

Log4JShell-Bytecode-Detector

🔍 Log4JShell Bytecode Detector Log4jShell Bytecode Detector is an open source tool that helps identify if a jar file is affected by the critical CVE-2021-44228. The tool scans the jar file and compares the classses against a set of vulnerable hashes for classes within the jar file. The hashes hav...

CVE-2025-31161

CVE-2025-31161 Proof of Concept for CVE-2025-31161 / CVE-2025-2825 This POC will exploit the authbypass vulnerability to create a new user account with Admin level permissions. The Auth Bypass requires the username targetuser of an existing user on the CrushFTP server. The default is set to...

EUVD-2026-72361

Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...

CVE-2026-61409

Dell Secure Connect Gateway (SCG) 5.0 Application, in versions prior to 5.36.00.00 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements). An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote cod...

CVE-2026-61409

Dell Secure Connect Gateway SCG 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading t...