cve-2023-22515-exp

cve-2023-22515-exp Python exploit script for cve-2023-22515 Arguments: root@kitploit: -h, --help show this help message and exit -H HOST, --host HOST Specify the URL -U USERNAME, --username USERNAME Specify the username -PW PASSWORD, --password PASSWORD Specify the password -E EMAIL, --email EMAI...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

-CVE-2017-9805-

Información de vulnerabilidad Recursos: https://vulners.com/cve/CVE-2017-9805 ¿Qué es esto? Un script de exploit en Python capaz de ejecutar comandos remotos en el shell de un sistema que aloja un Struts2 vulnerable a S2-052. Uso python s2-052.py --target 'http://192.168.0.233/orders/3' --command...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 A small tool to create a PoC for CVE-2000-0649. Usage This script verifies if the server is vulnerable for CVE-2000-0649. Keep in mind to play with HTTP, HTTPS and different paths. In my experience, the disclosure is mostly happening when connecting over HTTP and using the defau...

CVE-2020-11651

CVE-2020-11651 A script that exploits SaltStack CVE-2020-11651 and CVE-2020-11652 to add new users to a vulnerable Salt master by injecting entries into /etc/passwd and /etc/shadow. root@kitploit: Exploit Title: Saltstack 3000.1 - Remote Code Execution Date: 2020-05-04 Orignal Exploit Author:...

Windows10_Cumulative_Updates_PowerShell

Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

CVE-2018-2893

CVE-2018-2893 Vulnerability Verification Script Usage root@kitploit: python CVE-2018-2893.py 10.10.0.1 7001 Analysis Warning root@kitploit: https://www.anquanke.com/post/id/152164 Script Source root@kitploit: https://www.secfree.com/article-957.html...

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...

CVE-2024-1561

CVE-2024-1561 PoC Script This is a Proof of Concept PoC script for CVE-2024-1561. Check the full writeup for the CVE here: https://huntr.com/bounties/4acf584e-2fe8-490e-878d-2d9bf2698338 Affected Version: Gradio 4.12.0 This was fixed in this PR https://github.com/gradio-app/gradio/pull/6884 and w...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...

CVE-2021-34527

CVE-2021-1675 / CVE-2021-34527 Two mini Script to check if the PrintSpooler Serivce is running within the Forest. CVE-2021-1675: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-1675 CVE-2021-34527 aka PrintNightmare...

CVE-2025-33053-Proof-Of-Concept

CVE-2025-33053 Proof Of Concept This repository provides scripts to automatically deploy a WebDAV server on Ubuntu using Apache2 , and generate malicious.url shortcut files for use in phishing, red teaming, or lateral movement simulation. 📁 Contents setupwebdav.sh – Bash script to configure Apach...

SimpleCTF-UpdatedExploit

CMS Made Simple = 2.2.10 SQL Injection Exploit Overview This Python script exploits an unauthenticated SQL injection vulnerability in CMS Made Simple = 2.2.10 CVE-2019-9053. The exploit extracts sensitive information such as the salt, username, email, and password of the administrator from the CM...

Metasploit-Exploits-CVE-2023-6710

CVE-2023-6710 Exploit POC Explore the depths of CVE-2023-6710 with metasploit and our comprehensive Proof of Concept PoC. This CVE, identified as a potential security vulnerability, has been meticulously examined to demonstrate its impact and provide a hands-on understanding of the associated...

CVE-2013-3900-Remediation-Script

root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...

blueXploit

blueXploit blueXploit video blueXploit is my own proof-of-concept that reproduces CVE-2023-45866 , the Bluetooth keystroke-injection vulnerability discovered by Marc Newlin. It abuses a flaw in the Bluetooth protocol to inject keystrokes into a target device without pairing , opening the door to...

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit

Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit This script is written to improve this PoC script https://github.com/zerosum0x0/CVE-2019-0708 rdesktop binary was taking too long to timeout so i want it to timeout quicker Multiple ip scan was not possible now you can scan a given ip list Example Ru...

CVE-2020-14882

CVE-2020-14882 This script enables remote code execution RCE on Oracle WebLogic Server using an unauthenticated GET request. It exploits the vulnerability CVE-2020-14882. By executing arbitrary commands, an attacker can gain unauthorized access to the server. Exploit Details Exploit Title: Oracle...