CVE-2017-3506

What is this? This is a poc of CVE-2017-3506Weblogic XMLDecoder Serialization How to use it? check vul root@kitploit: java -jar WebLogic-XMLDecoder.jar -u http://192.168.174.144:7001 GetShell root@kitploit: java -jar WebLogic-XMLDecoder.jar -s http://192.168.174.144:7001...

CVE-2023-43208-mirth-connect-rce-poc

RCE vulnerability in Mirth Connect CVE-2023-37679 and CVE-2023-43208 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. CVE-2023-43208 is a serious security bug in NextGen Mirth Connect, a tool used by hospitals and clinics to share patient data. This bug lets hacke...

CVE-2023-24078

Description This script is a Proof of Concept PoC exploit I developed for CVE-2023-24078. After trying the publicly available PoCs that were not functional and facing frustration in trying to troubleshoot them, I just created my own script. Usage root@kitploit: usage: python3 CVE-2023-24078.py -h...

snmp-shell

SNMP Shell Shell Simulation over Net-SNMP with extend functionality Here is a preview : Description If your target has a Net-SNMP instance with the "extend" functionality, and you got a SNMP community string which gives you write access , you can use this tool to automate the process of sending...

CVE-2021-25646

Apache Druid Remote Code Execution CVE-2021-25646 by j2ekim Usage root@kitploit: python exp.py -u --url -c --command python cve-2021-25646.py -u http://127.0.0.1:8888 -c "ping 5ap7ta.dnslog.cn" Vulnerability Reproduction Article https://www.adminxe.com/2109.html Disclaimer Any direct or indirect...

CVE-2025-53772

CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview...

WhatsAppHACK-RCE

WhatsAppHACK-RCE...

CVE-2020-29667

CVE-2020-29667 Insufficient Session Expiration | Predefined Cookie Value Suggested description In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system and operate remote ATM...

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

CVE-2020-0796

CVE-2020-0796 SMBGhost from ollypwn Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a...

CVE-2026-52806

Gogs RCE — Argument Injection in git rebase CWE-88 Authenticated remote code execution against Gogs is parsed by Git as the --exec flag rather than a positional argument, causing sh -c to run after each replayed commit during the rebase. How the exploit works 1. Pre-flight — determines if the...

BlueKeep

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 700,000 machines on the public Internet vulnerable to this vulnerability, compared to about 2,000,000 machines that have Remote...

CVE-2018-8284-Sharepoint-RCE

CVE-2018-8284-Sharepoint-RCE...

cve-2019-3396

cve-2019-3396 Unauthenticated Confluence RCE cve-2019-3396 setup exploit libraries root@kitploit: bundle install run root@kitploit: ┌──user㉿hostname-/path/to/cve-2019-3396 └─$ ruby cve-2019-3396.rb exploit - CVE-2019-3396 Author - Abdallah Mohamed Elsharif Greetz to Ghost5egy and Hamza Abdulrahma...

Elastix-2.2.0-CVE-2012-4869

Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...

CVE-2018-1207-better

Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...

CVE-2020-35729

Information root@kitploit: Exploit Title: Klog Server 2.4.1 - Command Injection Unauthenticated Date: 22.12.2020 Exploit Author: b3kc4t Mustafa GUNDOGDU Vendor Homepage: https://www.klogserver.com/ Version: 2.4.1 Tested On: Ubuntu 18.04 CVE: 2020-35729 Description:...

CVE-2007-2447-Exploit

CVE-2007-2447 Exploit This repository contains an exploit for Samba smbd 3.0.20 CVE-2007-2447 that allows remote command execution via crafted SMB requests. Prerequisites This exploit requires Python 3 and a few dependencies. It's recommended to set up a virtual environment before running the...

ZeroPoint

ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect and mitigate exploitation of the CVE-2025-53770 zero-day vulnerability in Microsoft SharePoint Server. 🔍 What it Does This PowerShell script is designed to: Detect compromise indicators, such as suspicious .aspx webshells Parse ULS logs to...

CVE-2021-24155.rb

WordPress-Backup-RCE This Metasploit module allows an attacker with a privileged WordPress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Backup Guard versions prior to 1.6.0. This is due to an incorrect check of the uploaded file extension whi...