CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

CVE-2022-22963

CVE-2022-22963 spring cloud function spel rce spring cloud function one-click exploitation tool! by charis Blog https://charis3306.top/ Packaged as an exe file, ready to use out of the box Command theme root@kitploit: usage: Spring-cloud-function-spel0.2.exe -h --check CHECK --route ROUTE --url U...

Cl0neMast3r

Cl0neMast3r About: Cl0neMast3r is a Python script that was coded to make your life easier. Now you can easily choose your favorite tools from GitHub and install them on your system with one click. Even better you can ensure that you have latest version of your favorite tools. All this and more yo...

duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Proud user of JetBrains Mono ⚡ This README uses JetBrains Mono exclusively. Comic Sans is forbidden. !IMPORTANT 🚨 Disclaimer This exploit is...

RootMyVivo

RootMyVivo Root for vivo and iQOO phones with a locked bootloader. No unlocking, no flashing — install the APK, press the button, wait. Built on GhostLock CVE-2026-43499, a use-after-free in futex PI plus KernelSU installed on top of the temporary root. Русский · 中文 How it goes 1. Install the APK...

CVE-2025-63848

CVE-2025-63848 swish-prolog cve Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook. Impact One click Account takeover. Mitigation Upgrade to the latest version to mitigate the ATO...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 one-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 One-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

Root-My-Device

Root My Device A fork of BuSung-dev/Root-My-Galaxy, under the Apache License 2.0 — see LICENSE and Credits. Root My Device is a one-click installer for explicitly supported firmware builds. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build...

mailinabox

Mail-in-a-Box 作者 @JoshData 和贡献者。 Mail-in-a-Box 通过提供一台一键式、易于部署的 SMTP+全套服务服务器，帮助个人重新掌控自己的电子邮件：一个装在盒子里的邮件服务器。 请访问https://mailinabox.email 查看项目网站和设置指南！ 我们的目标是： 让部署优秀的邮件服务器变得简单。 促进互联网的去中心化、创新和隐私保护。 拥有自动化、可审计且幂等的配置。 不 打造一个完全不可入侵、NSA 也无法攻破的服务器。 不 做成一个可供高级用户自定义的东西。 此外，本项目还有一份行为准则，其优先级高于上述目标。加入我们的社区时，请先阅读...

netgear-pwnagent

PwnAgent This is the PoC for CVE-2023-24749, aka PwnAgent, a One-Click WAN-side RCE in Netgear RAX Routers. You can trigget this exploit by visiting http://pwn.mahaloz.re. Explanation Please visit the blog which explains this here...

Nginx_cve-2026-42945-scanner-gui

Ngxin cve-2026-42945-scanner-gui a need run jdk21version java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation Requires JDK 21 to run After extraction, java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation...

setup-ipsec-vpn

English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN サーバー自動セットアップスクリプト 数分で自分のIPsec VPNサーバーをセットアップし、IPsec/L2TP、Cisco IPsec、IKEv2をサポートします。 IPsec VPNはネットワークトラフィックを暗号化し、インターネット経由でデータが送信される際に、VPNサーバーとあなたの間の誰もがデータを盗聴できないようにします。これは、コーヒーショップ、空港、ホテルの部屋などの安全でないネットワークを使用する際に特に有用です。...

CVE-2019-17558_Solr_Vul_Tool

Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...

WordPress 1 Click Migration Plugin < 2.3 - Information Exposure

The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data includi...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode root@kitploit: python go.py Enter target URL → select function menu. Detection Target root@kitploit:...

CVE-2022-40684

CVE-2022-40684 One-click enumeration of all usernames and writing SSH public key Integrated and optimized the code from these two repositories to achieve one-click enumeration of all usernames and writing SSH public key results: https://github.com/carlosevieira/CVE-2022-40684/blob/main/exploit.py...

Root-My-Galaxy

Root My Galaxy Root My Galaxy is a one-click installer for explicitly supported Samsung model and kernel combinations. The application itself is kept separate from device offsets, native exploit payloads, and KernelSU build artifacts. Latest release The device feed and native payloads are...

ghostlock-kit

GhostLock Kit — vivo iQOO Neo9S Pro V2339FA / MT6989 适用于 vivo iQOO Neo9S Pro（V2339FA，MediaTek MT6989） 的 GhostLock 一键 root 套件。 本仓库包含：MCAST transport 移植补丁 、一键脚本、完整分析文档；完整可运行套件（含二进制与 KernelSU）见 Releases。 Device: vivo iQOO Neo9S Pro V2339FA / PD2339, MT6989 Firmware: PD2339A16.2.12.1.W10.V000L1 Andro...

CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...