CVE-2021-42013-Apache-RCE-Poc-Exp

Vulnerability Name Apache Remote Code Execution CVE-2021-42013 Vulnerability Description Apache HTTP Server is an open-source web server from the Apache Software Foundation. It is fast, reliable, and extensible via a simple API. It was discovered that the fix for CVE-2021-41773 in Apache HTTP...

CVE-2014-0472

CVE-2014-0472 Use root@kitploit: docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect...

Spring4Shell-POC

Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package root@kitploit: Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 失陷指标检测工具 此脚本旨在由具有 root 权限的用户在 F5 BIG-IP 的 Advanced Shell bash 中本地执行；不建议在任何其他环境中运行。注意：设备模式（Appliance Mode）不允许访问 Advanced Shell，因此该工具无法在此类系统上运行。 该脚本用于在 BIG-IP 上检查与 CVE-2020-5902 相关的失陷指标（Indicators of Compromise，IoC），这些指标在编写时已为 F5 Networks 所知。脚本汇总这些 IoC 并以报告形式呈现概览，供您参考以确定最佳行动方案。如果此工具发现...

CVE-2024-47176

CVE-2024-47176 — CUPS RCE エクスプロイトラボ サイバーセキュリティ & 仮想化 2025-2026 CVE-2024-47176 cups-browsed 経由の CUPS リモートコード実行 を実証するための隔離されたラボ環境。 セットアップ 必要な VDI Ubuntu 22.04 24.04 ではありません! — https://www.osboxes.org/ubuntu/ → VirtualBox VDI Kali Linux 2026.1 —...

CVE-2019-0193

CVE-2019-0193 Solr DataImport Handler RCE RCE-Vuln jdbc...

CVE-2019-7609

CVE-2019-7609 exploit CVE-2019-7609kibana RCE on right way by python2 scripts snapshot usage root@kitploit: python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit ...

git-dumper

git-dumper ウェブサイトからGitリポジトリをダンプするツール。 インストール pipで簡単にインストールできます： root@kitploit: pip install git-dumper 使用方法 root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL URL DIR 出力ディレクトリ optional arguments: -h, --help このヘルプメッセージを表示して終了 --proxy PRO...

text4shell-exploit

Text4shell-exploit This is a Proof of Concept exploiting the vulnerability in Apache Commons Text CVE-2022-42889 Vulnerable versions : 1.5.0 to not including 1.10.0 Impact Successful exploitation of this vulnerability allows an unauthenticated attacker to execute arbitrary code on the vulnerable...

struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Usage: Pre-requisites: have python, docker, maven and a jdk installed 1. clone this repo 2. run mvn clean package in project root 3. run docker build -t hack . 4. run docker run -d -p...

pinky

Uploading a webshell is almost always the next step after exploiting a web vulnerability, but services like Cloudflare and the new generation of firewalls do a really good job preventing attackers to run commands in the target via HTTP or HTTPS. On the other hand, text content filtering and...

CVE-2018-8174

CVE-2018-8174 MS Word 和 MS WordPad 通过 IE VBS Engine 实现的 RCE MS Word 和 MS WordPad 通过 IE VBS RCE 实现的远程代码执行 https://github.com/smgorelik/Windows-RCE-exploits/tree/master/Web/VBScript 将 index.html 保存到 Web 服务器 然后使用 Python 脚本生成 RTF 漏洞利用 Shellcode 是静态的 Down\Exec Putty.exe 来自主网站 查看 index.html 以获取 shellco...

CVE-2018-7600-Drupal-RCE

CVE-2018-7600 Drupal RCE Credits to: File| Drupal Ver| Source| Comment ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708| poc1-a2u.py| 8|...

CVE-2025-34028-PoC-Commvault-RCE

CVE-2025-34028 - Commvault Command Center Remote Code Execution A Python exploit for CVE-2025-34028, a remote code execution vulnerability in Commvault Command Center. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability...

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...

CVE-2025-55182

React2Shell CVE-2025-55182 ⚠️ Warning: This project is for educational and security research purposes only. 1. clone the repository root@kitploit: git clone https://github.com/mivmi/CVE-2025-55182.git cd CVE-2025-55182 2. start the docker containers root@kitploit: docker-compose up -d 3. open in...

CVE-2012-2982_python

CVE-2012-2982 利用程序（Python） 你好，我是一名安全研究员，这是我的第一个漏洞利用程序。 Webmin 1.580 存在一个 RCE 漏洞，也就是 CVE-2012-2982 使用此 payload： 1. 下载 2. 用文本编辑器打开！ 3. 将 targetIP 改为你的目标 4. 将 lhost 改为你自己的 IP 5. 将 lport 改为监听器将要运行的端口号 6. 最后，'page' : "%2F", 'user' : "user1", 'pass' : "1user" 这里默认用户名是 "user1"，请改成你自己的；"1user"...

CVE-2024-3400

CVE-2024-3400 PoC for educational purposes only. only use on servers you have permission to test. How-To-Use deps: root@kitploit: $ pip install rich scan targets.txt： root@kitploit: $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36...

CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-The-Silent-Gateway-Risk Letting attackers run malicious code without needing a cracked password, user interaction, or even a foothold in your network. That’s CVE-2025-27480 It’s late you are running on red-bull we have all been there. You’re troubleshooting a production issue and...

CVE-2024-25082

⚠️ CVE-2024-25082 - FontForge ZIP Remote Code Execution PoC Proof-of-Concept exploit for CVE-2024-25082 , a vulnerability affecting FontForge that allows Remote Code Execution RCE through a crafted ZIP archive. This repository demonstrates how the vulnerability can be exploited in a controlled lab...