128 matches found
lucky13
LUCKY13 Exploit This repository contains a proof-of-concept POC exploit for the LUCKY13 vulnerability CVE-2013-0169, which is a timing attack against certain implementations of the CBC Cipher Block Chaining mode of operation in cryptographic systems. The exploit aims to decrypt a target token by...
Silent_CVE_2019_16394
CVE-2019-16394 A simple POC python script of CVE-2019-16394 Script is adjusted for a french website, you may need to modify it if the website language is different. Install root@kitploit: pip install -r requirements.txt Usage root@kitploit: usage: cve201916394.py -h -u URL -f FILE -v optional...
CVE-2023-1545-POC-python
CVE-2023-1545-POC-python CVE-2023-1545-POC con python...
CVE-2023-27997-POC
Usage: python3 cve-2022-42475.py rhost rport lhost 'command' Exemple: python3 cve-2022-42475.py 192.168.10.1 8443 10.10.1.1 'ls -la /' Disclaimer: This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is...
CVE-2026-9082-PoC
python3 poc.py https://target.com...
CVE-2022-46169
CVE-2022-46169 Setup root@kitploit: git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 Usage root@kitploit: usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0...
CVE-2024-20767
Proof of Concept script for CVE-2024-20767 Overview get-the-files.py is a Python script that exploits a vulnerability in Adobe ColdFusion Servers CVE-2024-20767 to read files from the server. The script is based on a method outlined at https://jeva.cc/2973.html. Disclaimer This script is provided...
CVE-2025-58434-PoC
CVE-2025-58434 PoC Python proof-of-concept script for triggering POST /api/v1/account/forgot-password. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Credit zaddy6 Isaac David arthurgervais...
CVE-2026-5426
CVE-2026-5426 ⚡ 简单使用 请仅在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 已授权的渗透测试环境 示例设置： root@kitploit: git clone cd 示例用法： root@kitploit: 测试单个目标是否存在漏洞 python cve-2026-5426.py -t https://example.com 从文件扫描多个目标 python cve-2026-5426.py -t targets.txt 在存在漏洞的目标上执行命令 python cve-2026-5426.py -t...
CVE-2026-53805
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...
CVE-2021-23017-PoC
CVE-2021-23017-PoC python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1...
CVE-2026-8037-POC
CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode root@kitploit: python go.py Enter target URL → select function menu. Detection Target root@kitploit:...
CVE-2025-49132_poc
CVE-2025-49132 PoC Improved This is an improved version of the CVE-2025-49132 proof of concept exploit. CVE Information CVE ID : CVE-2025-49132 NVD Reference : https://nvd.nist.gov/vuln/detail/cve-2025-49132 Wiz Database : https://www.wiz.io/vulnerability-database/cve/cve-2025-49132 Original Work...
CVE-2024-24919
Intro Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability Wrong Check Point; vulnerable to arbitrary file reading. Requirements Python 3 Pip Required Library/Module Install via PIP requests urllib3 tqdm How To Run root@kitploit: PS C:\ python CVE-2024-24919.py...
CVE-2024-21413
CVE-2024-21413 This Python script is used to abuse the CVE-2024-21413 coined "MonikerLink" TryHackMe Room: MonikerLink Assumptions This PoC has been created for a lab environment which means the server needs to be configured in a specific setting i.e. TLS authentication is not supported for...
XSS2Shell
XSS2Shell ULTIMATE v3.0 WordPress Pre-Auth XSS → RCE Chain Exploit Developed by G0D150NE 📌 Features 🔍 Auto-detect XSS & WordPress version 🎯 3 Modes: Auto, XSS, Direct 📡 Callback server to capture credentials 🐚 WebShell with multiple execution methods 🔄 Persistence cron job, hidden admin,...
Exploit for CVE-2026-18963
POC-CVE-20...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...