CVE-2025-31161

CVE-2025-31161 - CrushFTP Exploit Script Description This repository contains a Python script to interact with the CrushFTP service vulnerable to CVE-2025-31161 The script allows you to list existing users and add a malicious user by exploiting the vulnerability. Features Check if the host is up...

CVE-2021-46398

CVE-2021-46398 - Lalie ARNOUD, Gaspard ANDRIEU In this repository, you will find a proof of concept of the exploitation of the CVE-2021-46398 flaw through a docker compose, as well as an analysis of the impacts of this flaw on information systems. root@kitploit: Exploit Title: FileBrowser 2.17.2 ...

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 This is a modified version of a POC for proxylogon. Instead of laucnhing "whoami" it creates a new user and adds that user to the administrator group and creates a reverse shell. The origonal POC code can be found here: https://www.exploit-db.com/exploits/49663 Usage: python...

CVE-2025-31161

CVE-2025-31161 Wrote an exploit in Go for CVE-2025-31161 affecting crushFTP. Usage root@kitploit: ./exploit -target http://localhost:8085 -user crushadmin -action create-admin -new-admin-user username -new-admin-pass pass...

CVE-2023-42793

CVE-2023-42793 - Create username administrator Example of command execution: root@kitploit: python3 exploit.py -u http://localhost User add token - eyJ0eXAiOiAiVENWMiJ9.YkZ0V2tzR3NvWXhZelRfZTN0cFF1SkZjVWVz.N2M0Njk2ZTgtNWZhYi00MTU5LWJmZjQtYWU1MDFlYzZiMGY1 Successful execution, preparing for the RC...

UnrestrictedUserCreator

サムスンでは動作しません。申し訳ありません。サムスンはセキュアフォルダを優先して複数ユーザー機能を無効化しています。 adb push exploit.sh /data/local/tmp adb shell chmod +x /data/local/tmp/exploit.sh adb shell /data/local/tmp/exploit.sh...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 centos8対応バージョン 以下を基に修正 https://github.com/berdav/CVE-2021-4034/tree/main/dry-run 使用方法 pwnkit-dry-run.c内のsystem関数を修正して、任意のコマンドを実行する （デフォルトではr00tユーザーを追加し、パスワードはXHSZWCPU6Nvobe） makeでコンパイルする ターゲットマシンにアップロードして実行する...

CVE-2025-31161

利用 CVE-2025-31161 安装 1. root@kitploit: git clone https://github.com/cesarbtakeda/CVE-2025-31161.git && cd CVE-2025-31161 2. 使用方法 root@kitploit: sudo exploit2.py -h -u HOST -p PORT -tu TARGETUSER -nu NEWUSER -np PASSWORD 或 1. 依赖 lcurl 库 root@kitploit: git clone...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation CVE-2021-4034をベースに強化されており、Exploitを実行するとデフォルトでユーザー名rooter、パスワードHello@Worldが追加され、rooterユーザーはsudo権限を持つことになります。 Refer to CVE-2021-4034, executing Exploit will add username rooter, password Hello@World by default, and The...

CVE-2024-22274-RCE

CVE-2024-22274 Exploit This repository contains an exploit for CVE-2024-22274. The exploit creates a new user on a remote machine via SSH and then provides a root shell. Requirements Go Golang installed on your machine. You can download it from here. A remote machine with SSH access. Compilation ...

CVE-2021-31762

..| CVE-2021-31762 |.. 説明 : クロスサイトリクエストフォージェリCSRF攻撃を悪用して、Webminのユーザー追加機能を介して特権ユーザーを作成し、その後Webminの実行中プロセス機能を介してリバースシェルを取得する テスト済みバージョン : Webmin 1.973 GitHubの最新バージョン 07/03/2021 攻撃タイプ: リモート 影響 : リモートコマンド実行 エクスプロイトのC0de POC : YouTube POC : https://youtu.be/qCvEXwyaF5U 製品ベンダー : https://www.webmin.com...

CVE-2024-7593_PoC_Exploit

CVE-2024-7593 Exploit Script This Bash script serves as a proof of concept PoC for exploiting the authentication bypass vulnerability in Ivanti vTM CVE-2024-7593. It allows users to create a new admin user on the target system. Table of Contents Prerequisites Usage Parameters Example Author Licen...

polkadots

polkadots CVE-2021-3560 ローカル特権昇格エクスプロイト このエクスプロイトは、新しい特権ユーザーを作成し、それを使ってルートに昇格できます。 影響を受けるディストリビューション: RHEL 8 Fedora 21 Debian testing Bullseye Ubuntu 20.04 使用方法 root@kitploit: ./polkadots -a Account -n Account name -h Password hash -i iterations ハッシュ化されたパスワードを生成: openssl passwd -6 password@123...

CVE-2020-6287

CVE-2020-6287 SAP NetWeaver AS JAVA（LM Configuration Wizard）認証バイパス（シンプルなJavaユーザーと管理者Javaユーザーの作成） SAP NetWeaverは、SAPの統合テクノロジープラットフォームであり、SAP Business Suite以降のすべてのSAPアプリケーションの技術基盤です。SAP NetWeaverは、サービス指向のアプリケーションおよび統合プラットフォームであり、SAPアプリケーションの開発・実行環境を提供します。また、カスタム開発や他のアプリケーション・システムとの統合にも使用できます。SAP...

BIT-JENKINS-2026-84646

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...

CVE-2026-86292

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

EUVD-2026-72321

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

CVE-2026-86292 SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication

A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. Th...

CVE-2026-86292

SourceCodester Simple Traffic Offense System 1.0 is vulnerable to missing authentication in the User Creation component, specifically the file saveuser.php . Manipulating the position argument allows an unauthenticated remote attacker to bypass access controls, leading to low impacts on confident...