zscan

zscan A fast, customizable service detection tool powered by a flexible fingerprint system. It helps you identify services, APIs, and network configurations across your infrastructure. Documentation | Features | Installation | Usage ✨Features Active Scanning Engine : High-performance concurrent...

Spring4Shell-POC

Spring4Shell PoC Application This is a dockerized application that is vulnerable to the Spring4Shell vulnerability CVE-2022-22965. Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat...

CVE-2020-0796

CVE-2020-0796 Scanner = https://github.com/ButrintKomoni/cve-2020-0796 Remote overflow POC = https://github.com/jiansiting/CVE-2020-0796 SMBGhostRCEPoC = https://github.com/chompie1337/SMBGhostRCEPoC...

CVE-2022-1388

CVE-2022-1388 Nuclei Template for CVE-2022-1388. I have used the shadow file for poc , you can use the passwd '/etc/passwd' file as well. Change the Extractor according to your choice. POC Reference: https://support.f5.com/csp/article/K23605346...

PyExfil

PyExfil Stress Testing Detection & Creativity PyExfil was born as a PoC and kind of a playground and grew to be something a bit more. In my eyes it's still a messy PoC that needs a lot more work and testing to become stable. The purpose of PyExfil is to set as many exfiltration, and now also...

opgp-service-cve-2019-9153

CVE-2019-9153 vulnerability reproduce PoC based on setup from BSI investigate vulnerability of opgp-service API to such an attack run tests with: root@kitploit: npm test conclusion: opgp-service is by default setup with AEADprotect=true which protects against the signature bypass attack described...

CVE-2025-24752-POC

CVE-2025-24752-POC Introduction This python application checks whether a site is vulnerable to CVE-2025-24752. Install Clone this repo and run: root@kitploit: pip3 install -r requirements.txt Usage root@kitploit: python3 cve-2025-24752.py --url http://example.com or root@kitploit: python3...

apache-struts-v2-CVE-2017-5638

apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...

Vectored-Exception-Handling-Squared

Vectored Exception Handling Squared A Rust Proof of Concept. Read more on my blog, all original research by CrowdStrike, this is just the POC for it! Unless I am blind; there does not seem to be much out there POC's etc relating to the discovery made by CrowdStrike researchers, called Vectored...

Blinder

Blinder Blidner is a small python library to automate time-based blind SQL injection by using a pre defined queries as a functions to automate a rapid PoC development. Installation You can install Blinder using the following command: pip install blinder Or by downloading the source and importing ...

CVE-2023-23752

This is a POC for CVE-2023-23752 written in Python that displays username and password information. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py The execution of the script is demonstrated in the GIF below:...

CVE-2019-1064

CVE-2019-1064 CVE-2019-1064 - AppXSVC Local Privilege Escalation Apears that this may not be as fixed as expected. PoC temporarily unavailable...

CVE-2024-5522

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites. This tool helps identify and exploit the vulnerability by scanning a list of target URLs and attempting a specific payload to determine if the site is vulnerable. Features Automatic Vulnerability Scanning : Scans targ...

Bug_Bounty_writeups

STOP DOING BEG-BOUNTIES - STOP COPYING ANOTHERS POC ! DO SOMETHING DIFFERENT!🔴🔴🔴🔴✔ Want to support my work? DONT TRY HACKING WITHOUT BASICS --- IT WILL BE DANGEROUS FOR YOU AND YOUR FUTURE! Contents...

jankybank

jankybank Inspired by and largely borrowed from kozmer/log4j-shell-poc Works with eurogig/log4sheller Use to create a CTF based on Log4j...

cve-2022-23134-poc-and-writeup

CVE-2022-23134 Writeup and POC This is a POC and writeup for CVE-2022-23134 in particular versions of Zabbix. Please read writeup.md on the details needed to use the exploit - it does require some setup of MySQL!...

CVE-2022-26134

CVE-2022-26134 poc Declaration: This POC is for learning purposes only. Any illegal operations are prohibited. If used for malicious destruction, it has nothing to do with the author!!! Usage Single URL verification root@kitploit: python CVE-2022-26134.py target url Batch URL verification...

cve-2017-5638

CVE-2017-5638 PoC Code in Python | DORK: ext:action Example PoC Code for CVE-2017-5638 | Apache Struts Exploit | DORK: ext:action USAGE: python struts.py https://victim.site dir The initial Python Script that was Posted didn't correctly format the Content-Type Header. I recoded the Content Type...

xortigate-cve-2023-27997

xortigate-cve-2023-27997 Exploit for xortigate CVE-2023-27997. It is not usable "as-is" and serves educational purposes. Information Please refer to the blogpost for additional details. This is a POC that demonstrates the bug, nothing more. Example...

CVE-2022-22980

CVE-2022-22980 A local based poc of CVE-2022-22980, for the detail of this vulnerability see https://tanzu.vmware.com/security/cve-2022-22980. You need to install mongodb on locahost before running. And I've create a web based poc with docker on dockerv Run root@kitploit: mvn spring-boot:run or...