GrafanaDirInclusion

Grafana CVE-2021-43798 Exploit Script Script to demonstrate the Grafana directory traversal exploit CVE-2021-43798 that affects Grafana versions 8.0.0-beta1 through 8.3.0. Primarily used for a demonstration in a CTF. Written in python with standard library modules only. Only use this for legitima...

ExploitPOC_MS15-014_CVE-2015-0009

此存储库没有 README。...

CVE-2022-34918

CVE-2022-34918 LPE PoC LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic You can find the associated write-up on our blog Usage getroot should be in the current folder root@kitploit: $ ls getroot poc $ ./poc CVE-2022-34918...

TKEY-remote-DoS-vulnerability-exploit

TKEY-remote-DoS-vulnerability-exploit Exploit code for CVE-2015-5477 POC...

CVE-2023-38831

CVE-2023-38831 winrar exploit 6.22 = Quick poc root@kitploit: git clone https://github.com/nhman-python/CVE-2023-38831.git cd cd CVE-2023-38831 python3 poc.py poc example usage root@kitploit: python3 simplefile.txt script.bat output.zip example usage https://www.youtube.com/watch?v=-mN4tTKaMhQ...

CVE-2024-24141

CVE-2024-24141: School-Task-Manager-System-SQLInjection-1 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24141.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24141/blob/main/CVE-2024-24141.md...

CVE-2024-27956-for-fscan

🛑CVE-2024-27956-for-fscan Thanks for PoC by diego-tella English This is a Yaml PoC rule of CVE-2024-27956 Wordpress Automatic SQLi for fscan. How to use: 1. Add the yml file to path:/fscan-main/WebScan/pocs. 2. Build the fscan's go files. 3. Start the fscan and enjoy. Attention: If the...

CVE-2024-24138

CVE-2024-24138: Online Timesheet App SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24138.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24138/blob/main/CVE-2024-24138.md...

CVE-2025-30065-PoC

CVE-2025-30065 PoC Usage Build the image root@kitploit: docker build -t cve-2025-30065 . Generate the malicious Parquet root@kitploit: docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Trigger the exploit root@kitploit: docker run --rm -v...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

CVE-2018-17553

CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS version 2.8 and prior This proof of concept was put together when working on the Black Pearl box from TCM. I couldn't find anyone that put out a PoC other than just using Metasploit. As I'm avoiding Metasploit in my hacking journey to then go back an...

CVE-2024-39199

CVE-2024-39199 / CNVD-2024-31551 write url in url.txt and run 100000CMS-POC.py to check...

CVE-2023-23169

CVE-2023-23169 POC for CVE-2023-23169 Local File inclusion & Server side request Forgery Steps to reproduce : Local File Incusion : 1. echo "" poc.docx 2. Upload the file in PDFocus services 3. View/Download file after to triggered POC SSRF : 1. echo "" poc.docx 2. Upload the file in PDFocus...

AntiKernelDebug-POC

AntiKernelDebug-poc 这是什么？ 一个关于如何通过池标签检测 Windows 内核调试的 POC。 这个 poc 实际上是如何工作的？ 查询系统池标签信息，匹配 TagUlong == 'oIdK'。 已在 Win10 1809 上测试。 编译 Visual Studio 2019 llvm-msvc 链接...

POC_for_-CVE-2024-22371

此存储库没有 README。...

CVE-2022-44268-automated-poc

CVE-2022-44268 ImageMagick Arbitrary File Read poc Fully Automated ⚙ An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image. Image Magic version effected root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25...

libSSH-bypass

libSSH-bypass Implementation of CVE-2018-10933 // but with a CIDR block scanner. Didn't feel like spending $$ on Shodan's API, so i've added a range scanner that dumps vuln servers into a file with a soft scan. you'll need to pip install paramiko as a dependency. this is an early PoC version, I'l...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the path traversal vulnerability in the python AioHTTP library = 3.9.1 make sure to find a valid public facing directory such as "/static/" or "/assets/" Once you find it, go in main.py and replace the /static/ string with the one you found...

better-poc-for-CVE-2018-15133

Better PoC for CVE-2018-15133 An automated PoC for CVE 2018-15133 All credits goes to kozmic who made the original PoC of CVE 2018-15133 This is just an automation script i made while doing some lab box having this vulnerability because i didnt want to make a new deserialized object with phpggc...

EP4-redes

POC CVE-2018-15473 exploit Adapted from https://github.com/Rhynorater/CVE-2018-15473-Exploit To run this exploit you need to have installed: docker docker compose SSH server Let's start by pulling from DockerHub an image that has an old version 6.6 of SSH on an old Ubuntu: It may take a few minut...