CVE-2022-4611

CVE-2022-4611 note 1. python exploit.py...

suds

OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...

CVE-2024-9933

CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option URL Options: check : Verify if the target URL is vulnerable. exploit : Attempt to exploit the vulnerability on the provided URL. Examples: python CVE-2024-9933 .py check http://example.com python CVE-2024-9933 .py exploit http://example.c...

HFS2.3_poc

HFS2.3poc HFS2.3 Unauthenticated Remote Code Execution CVE-2024-23692 python HFS2.3poc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage:...

Docassemble_poc

Docassemblepoc Docassemble Arbitrary File Read Vulnerability CVE-2024-27292 python Docassemblepoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--'...

Spring4Shell-Python-Firewall-POC

Python Firewall for Spring4Shell CVE-2022-22965 Mitigation 1. Overview This project is a simple but effective firewall implemented as a Proof-of-Concept POC in Python. It's designed to act as an HTTP server that inspects incoming POST requests to detect and block the specific payload pattern...

CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...

CVE-2020-0674-PoC

CVE-2020-0674 About the reproduction operation of this vulnerability: The key is the writing of HTML Python source code provides the function of automated testing of HTML web pages Using the IEdriver provided by the selenium library, tested to support IE11 Script usage requires inputting the HTML...

-CVE-2022-44268

PNG Image Generator This Python script generates a PNG image filled with a specific color and embeds a file path as metadata using the Pillow library. Running the Script Prerequisites Python install from Python's official website Pillow library pip install pillow Steps 1. Clone the Repository:...

CVE-2022-22963

CVE-2022-22963-Reverse-Shell-Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

CVE-2019-17662

CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...

spring-core-rce

CVE-2022-22965: Spring-Core-Rce EXP Features: 1. Vulnerability detection does not write a webshell, simple string output 2. Custom webshell file name and path 3. Does not append to the same file; each detection writes to a different webshell file name 4. Supports writing Behinder webshell 5. Prox...

CVE-2026-8838-RCE

CVE-2026-8838 — Amazon Redshift Python Driver: Remote Code Execution via eval ⚠️ Educational Use Only Research and demonstration project in offensive cybersecurity conducted exclusively for educational and awareness purposes. Any use on systems without explicit authorization is illegal. This...

CVE-2021-21315-exploit

CVE-2021-21315 Exploit Des: My python Script to exploit system Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation I thought this POC will not show real world impact, But it'll be cool in CTF's...

CitrixHoneypot

Honepot for CVE-2019-19781 Citrix ADC Detect and log CVE-2019-19781 scan and exploitation attempts. Requirements: python3 openssl Usage: 1. Clone repo: git clone https://github.com/MalwareTech/CitrixHoneypot.git CitrixHoneypot && cd CitrixHoneypot 2. Make ssl and logs directory: mkdir logs ssl 3...

Validate-CVE-2023-29489-scanner-

Validate-CVE-2023-29489-scanner Inspired by https://github.com/haxor1337x/Scanner-CVE-2023-29489 Verifies CVE-2023-29489 XSS on Cpanel webcall. Features: Mass scan IPs based on CIDR or a set of range Scan based on specific common ports of cpanel Requirements: Python 3.10+ Selenium Google Chrome...

CVE-2014-0075_PoC

CVE-2014-0075PoC This is a simple PoC written n python that demonstrates the DoS through integer overflow...

cve-2026-33067

CVE-2026-33017 — Langflow Unauthenticated RCE Nuclei Template Nuclei template that detects CVE-2026-33017 — an unauthenticated remote-code-execution vulnerability in Langflow ≤ 1.8.2 reachable through the public flow-build endpoint: root@kitploit: POST /api/v1/buildpublictmp/flowid/flow The...

CVE-2024-48990-PoC

CVE-2024-48990-PoC What is needrestart and how does it work? Needrestart is a widely used utility on Linux systems default on many Ubuntu versions that checks after a software update whether any service or the system itself needs to be restarted. By analyzing running processes, it determines if...

pacemaker

Pacemaker Attempts to abuse OpenSSL clients that are vulnerable to Heartbleed CVE-2014-0160. Compatible with Python 2 and 3. Am I vulnerable? Run the server: root@kitploit: python pacemaker.py In your client, open https://localhost:4433/ replace the hostname if needed. For example: root@kitploit:...