CVE-2022-25061

CVE-2022-25061 This script exploits a remote command execution vulnerability under the oalsetIp6DefaultRoute component in the TPLink WR840N router...

aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Description : allows remote authenticated users to execute arbitrary commands via the setting menu of Sotfware Store. Affected version : All = 6.6.6 Information To make this PoC, I just installed the software using docker-compose Vulnerability Type : Remote...

CVE-2020-14882_ALL

CVE-2020-14882ALL CVE-2020-14882ALL comprehensive exploitation tool, supporting command echo detection, batch command echo, external XML command execution without echo, and other features. Required modules: requests, http.client The tool is only for authorized security testing. Do not use it...

CVE-2021-44967

CVE-2021-44967 - Authenticatedprivileged RCE Authenticated privileged remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload arbitrary PHP code file. Usage python3 exploit.py --url --user --password --lhost --lport A superadmin user is...

WSMan-WinRM

WSMan-WinRM Una colección de código fuente y scripts de prueba de concepto para ejecutar comandos remotos a través de WinRM utilizando el objeto COM WSMan.Automation. Antecedentes Para obtener información de antecedentes, consulte la siguiente publicación de blog: WS-Management COM: Otro enfoque...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

CVE-2018-6574

CVE-2018-6574 Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow go get remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. from mitre RCE command The...

struts-pwn_CVE-2017-9805

struts-pwn - CVE-2017-9805 Exploit An exploit for Apache Struts CVE-2017-9805 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' Check if the vulnerability exists against a list of URLs. python struts-pwn.py...

snmp-shell

SNMP Shell Simulación de Shell sobre Net-SNMP con funcionalidad extend Aquí una vista previa : Descripción Si tu objetivo tiene una instancia de Net-SNMP con la funcionalidad "extend" , y tienes una cadena de comunidad SNMP que te otorga acceso de escritura , puedes usar esta herramienta para...

CVE-2020-14947

CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...

CVE-2021-31760

..| CVE-2021-31760 |.. Descripción : Explotando un ataque de Cross-site request forgery CSRF para obtener una ejecución remota de comandos RCE a través de la función de procesos en ejecución de Webmin Versión probada : Webmin 1.973 versión más reciente de GitHub 07/03/2021 Tipo de ataque: Remoto...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

CVE-2014-6271

Shellshock Exploitation CVE-2014-6271 Shellshock is effectively a Remote Command Execution vulnerability in BASH. This script exploits the vulnerability in the web environment on apache or similar with modcgi enabled. The vulnerability lies in the manipulation of environment variables, which are...

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example o...

LibSSH-Authentication-Bypass

LibSSH-Authentication-Bypass LibSSH Authentication Bypass CVE-2018-10933 Usage: To use this script type in: python3 LibAuth.py –help to see all the options and parameters we need to use. So we need to specify the victim’s IP address, port no and finally the command that we want to execute in the...

CVE-2022-42889

Aplicación de prueba CVE-2022-42889 Este repositorio contiene una aplicación simple que utiliza Apache Commons Text 1.10, la cual es vulnerable a CVE-2022-42889. Ejecución de la aplicación Reemplace el comando nc en DemoApplication.java por la dirección IP de su host. Escuchando con netcat:...

CVE-2025-7775-vulnerable-lab

CVE-2025-7775 Vulnerable Lab This repository provides a vulnerable setup to test nuclei template for CVE-2025-7775. Run root@kitploit: docker build -t vuln-app . docker run -d --name vuln-test -p 5000:5000 vuln-app Vulnerability Tests 1. Remote Command Execution RCE root@kitploit: curl -X POST...

spring4shell-CVE-2022-22965

Simple Spring4Shell POC Check if endpoint is vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Exploit vulnerable endpoint python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Execute command on uploaded webshe...

Shelly

Shelly | Gestor de Backdoors Simple con Python basado en weevely Shelly es una herramienta simple escrita en Python, que sirve para acceder remotamente a un sitio web Instalación : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requisitos : root@kitploit: sudo pip...

CVE-2019-12744

CVE-2019-12744 Information Exploit Title: Remote Command Execution through Unvalidated File Upload in SeedDMS versions 5.1.11 CVE: CVE-2019-12744 Vendor Homepage: https://www.seeddms.org/index.php?id=2 Exploit Author: NobodyAtall Tested version: Seeddms 5.1.10, 5.0.11 Tested OS: Windows 7 x64...