CVE-2022-24124

POC para CVE-2022-24124 Código de Exploit para CVE-2022-24124 también conocido como Casdoor SQL Injection Enlaces del Exploit: ExploitDB-50792 PacketStormSecurity Resultado esperado: Volcar la versión de la base de datos SQL en el host que ejecuta Casdoor 1.13.1 Destinado únicamente para fines...

web-server-audit_CVE-2026-42945

webserveraudit Don't ask if you're vulnerable. Ask if you're exploitable. A single-file Python tool that audits nginx and Apache against known CVEs by checking both the installed version and whether the vulnerable code path is actually reachable through your configuration. Why? Most CVE scanners...

CVE-2022-1040

CVE-2022-1040 Here is the Sophos exploit found on 2022-08-04 working on version 17.0.10 MR-10...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Este script escanea una IP/rango/CIDR y muestra los servidores Microsoft Exchange y las versiones descubiertas. La IP/rango/CIDR especificada se escaneará con masscan en el puerto tcp/443. Después de un escaneo exitoso, intenta hacer HTTP GET "/owa/auth/logon.aspx" con curl...

pgpdump

pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes...

CVE-2024-27316_poc

CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start root@kitploit: docker-compose up -d Connectivity check httpd v2.4.58 vulnerable root@kitploit: curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version...

CVE-2022-42889

Aplicación de prueba CVE-2022-42889 Este repositorio contiene una aplicación simple que utiliza Apache Commons Text 1.10, la cual es vulnerable a CVE-2022-42889. Ejecución de la aplicación Reemplace el comando nc en DemoApplication.java por la dirección IP de su host. Escuchando con netcat:...

CVE-2023-42284

Disclaimer For educational purpose only! Details Proof of concept for CVE-2023-42284. Tyk Gateway is vulnerable to SQL injection. Fixed in 5.0.7 version. The URL parameter ‘apiversion’ of the "https:///api/errors/count/...?res=day&p=...&apiversion=&apiid=..."is vulnerable to Blind SQL injection...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Fixed Version Descripción Este es un exploit para la vulnerabilidad de Apache HTTP Server 2.4.49 identificada como CVE-2021-41773. La versión original del exploit publicada en Exploit-DB contenía errores de sintaxis y...

check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

fuxi

Fuxi 2.1 - en desarrollo Fuxi es compatible con múltiples plataformas y funciona en cualquier entorno Python 3.x, incluyendo Linux, Mac OSX y Windows. Comenzando Docker root@kitploit: docker pull jeffzh3ng/fuxi docker run -itd --name fuxidocker -p 5000:50020 jeffzh3ng/fuxi:latest Espere unos 15...

CVE-2026-11561

CVE-2026-11561 — Apinizer SSTI / RCE Version Check Infra Nuclei template to detect Apinizer versions lower than 2026.04.6, which are vulnerable to CVE-2026-11561 Server-Side Template Injection leading to Remote Code Execution, CVSS 9.8. Usage root@kitploit: echo | nuclei -t CVE-2026-11561.yaml Ho...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

exploit-nginx-1.10.3

Este repositorio no tiene un README...

ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | Un novedoso escáner de seguridad web de código abierto. Nota: AWSS es el nombre anterior de ASST Introducción Las aplicaciones web se han convertido en una parte integral de la vida cotidiana, pero muchas de estas aplicaciones se...

CVE-2018-12613-phpMyAdmin

CVE-2018-12613-phpMyAdmin This article will share a file inclusion vulnerability in phpMyAdmin version 4.8.1, explaining from configuration to principle, and then to vulnerability reproduction. More importantly, it helps everyone understand the knowledge behind these real vulnerabilities. A basic...

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam. id: CVE-2022-31977 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to SQ...

Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)

Prometheus Blackbox Exporter through 0.17.0 contains a server-side request forgery caused by unsanitized target parameter in /probe, letting attackers perform SSRF attacks, exploit requires sending crafted target parameter. id: CVE-2020-16248 info: name: Prometheus Blackbox Exporter - Server-Side...

OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization

Open Access Management OpenAM is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution RCE via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypasses the WhitelistObjectInputStream...

Tiempo.com <= 0.1.2 - Cross-Site Scripting

Tiempo.com before 0.1.2 is susceptible to cross-site scripting via the page parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to stea...