CVE-2024-4577

This is POC of CVE 2024-4577 This exploit allows attacker to perform RCE in PHP Versions such as PHP 8.3 8.3.8 PHP 8.2 8.2.20 PHP 8.1 8.1.29 Arguments you can check from code! To read more about this particular exploit check nist.gov...

CVE-2022-26134-Confluence-RCE

Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection Another exploit in OGNL Land Description Confluence is a web-based corporate wiki developed by Australian software company Atlassian. On June 02, 2022 Atlassian released a security advisory for their Confluen...

CVE-2020-27955-LFS-main

Exploit de ejecución remota de código RCE en Git-lfs CVE-2020-27955 versión .bat / powershell Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows...

CVE-2023-24489-poc

CVE-2023-24489-poc POC for CVE-2023-24489 with bash. It needs a list of target.txt full of the targets you want to test in this format: https://example1.com https://example2.com https://example3.com The file must be within the same dir where the bash script is executed. Please use with caution !...

CVE-2025-52136

CVE-2025-52136 root@kitploit: https://github.com/ricardojoserf/emqx-RCE The original exploitation method uploads an EMQX plugin and adds Erlang os module calls in the plugin template code to execute system commands for RCE. In an outbound network environment, curl is available by default, so you...

CVE-2026-22812-POC

OpenCode CVE-2026-22812 Exploiter Simple Python tols to check and exploit OpenCode vulnerability CVE-2026-22812. Install root@kitploit: git clone https://github.com/CayberMods/CVE-2026-22812-POC.git cd CVE-2026-22812-POC pip install requests urllib3 argparse concurrent-log-handler colorama Basic...

watchTowr-vs-FortiWeb-CVE-2025-25257

watchTowr-vs-FortiWeb-CVE-2025-25257 Detection Artifact Generator for FortiWeb CVE-2025-25257 See our blog post for technical details https://github.com/user-attachments/assets/e59f2b3b-2b9b-469f-b4a8-2b7df2ede194 Detection in Action root@kitploit: python watchTowr-vs-FortiWeb-CVE-2025-25257.py...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 Una Prueba de Concepto para el encadenamiento de los CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 desarrollada por @watchTowr para lograr Ejecución Remota de Código en Juniper JunOS en productos de las series...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

CVE-2024-40711

CVE-2024-40711 Exploit para Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 Vea nuestra publicación en el blog para detalles técnicos https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC en Acción root@kitploit: CVE-2024-40711.exe -f...

CVE-2024-27130

CVE-2024-27130 Una prueba de concepto desarrollada por @watchTowr para explotar una vulnerabilidad de desbordamiento de pila stack overflow y obtener RCE en un dispositivo QNAP vulnerable. Sigue al equipo de laboratorios de watchTowr para nuestra investigación de seguridad...

Fortijump-Exploit-CVE-2024-47575

CVE-2024-47575 Fortinet FortiManager Ejecución Remota de Código no Autenticada, también conocido como FortiJump CVE-2024-47575 Consulte nuestra entrada de blog para detalles técnicos Para empezar, establezca su sesión ncat: root@kitploit: nc -lvvnp 80 Luego, ejecute nuestro generador de artefacto...

CVE-2025-0282

CVE-2025-0282 ثغرة RCE قبل المصادقة في Ivanti Connect Secure IFT نتيجة تجاوز سعة المكدس في TLS CVE-2025-0282 تم تعطيل هذا الاستغلال عمداً بطرق غير بسيطة وسيتطلب جهداً لجعله يعمل كما هو موضح سابقاً في منشور مدونتنا حول تقنية الاستغلال. لفهم هذه الثغرة، يمكنك الاطلاع على الشرح الفني الخاص بنا. شرح...

cve-2023-46604

Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 is a widely exploited vulnerability that appears on CISA's KEV list. This go-exploit implementation can execute a reverse shell on the targets using a Nashorn payload, or download a binary to the target and execute it. Compiling To build the exploit...

CVE-2025-49844

CVE-2025-49844 – Redis Lua Parser Use-After-Free Lua chunk-name GC race leading to Redis 8.2.1 use-after-free and remote code execution. Overview Redis embeds Lua 5.1 for scripting. In versions up to 8.2.1 the luaYparser function does NOT anchor the chunk name string on the Lua stack before...

CVE-2015-1635-POC

CVE-2015-1635-POC y MS15-034 HTTP.sys HTTP.sys es un controlador de kernel de Microsoft Windows que maneja las solicitudes HTTP. Fue introducido desde IIS 6.0 para optimizar el rendimiento del servidor IIS. Los procesos del servicio IIS dependen de HTTP.sys. La vulnerabilidad de ejecución remota ...

CVE-2017-1000353

CVE-2017-1000353 POC ¿Cómo reproducir el CVE-2017-1000353 de Jenkins? Clona este repositorio, usa el payload preconstruido jenkinspoc.ser con el siguiente comando: root@kitploit: python exploit.py http://your-ip:8080 jenkinspoc.ser Entonces se ejecutará touch /tmp/success. Requisitos de versión d...

CVE-2024-37084

CVE-2024-37084 Ejecución remota de código en Spring Cloud...

log4shell-test-exploit

Test exploit of CVE-2021-44228 log4shell Preparation root@kitploit: Install Nodejs HTTP server npm -g i http-server Build victim app cd victim-app mvn install Compile Trojan cd test-trojan javac Trojan.java Build marshalsec required Java 8 git clone [email protected]:mbechler/marshalsec.git ...

cve-2021-41773

Apache 2.4.49 - Path Traversal or Remote Code Execution cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-41773 If CGI-BIN is enabled...