Wazuh-RCE

Intro Wazuh RCE 8.4...

CVE-2024-7339

CVE-2024-7339: Information Leak Vulnerability in DVR devices. Exploiter an Vulnerability detection and Exploitation tool for CVE-2024-7339 Information leak vulnerability in DVR Vulnerability Over 400,000+ devices which leaks information like product model, kernel version and etc. Installation...

CVE-2024-31982

CVE-2024-31982 PoC and Bulk Scanner Overview POC for CVE-2024-31982: XWiki Platform Remote Code Execution 14.10.20. This POC is based on this security advisory . How to Use Single Target Scan To scan a single target endpoint: root@kitploit: python CVE-2024-31982.py -u target Bulk Target Scan To...

rifiuti2

Introducción Rifiuti2 es una herramienta para analizar archivos INFO2 de la Papelera de Reciclaje de Windows. El análisis de la Papelera de Reciclaje de Windows se realiza normalmente durante la informática forense en Windows. Rifiuti2 puede extraer la hora de eliminación de archivos, la ruta...

CVE-2024-36401-PoC

CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401 GeoServer Vulnerable Versions of GeoServer are prior to 2.23.6 | 2.24.4 | 2.25.2 !!! FOR SECURITY TESTING PURPOSES ONLY !!! DO NOT USE THIS ON SYSTEMS THAT YOU DO NOT OWN UNLESS YOU HAVE EXPRESS PERMISSION !!! To run... 1. Start a...

PoC-CVE-2025-26529

PoC for CVE-2025-26529 – Moodle XSS to RCE Exploit This is a Proof of Concept PoC demonstrating the SSRF to XSS → XSS to RCE vulnerability chain in Moodle. Overview I’ve uploaded all the necessary files to demonstrate the full chain of exploitation: 1. SSRF to XSS 2. Grabbing the admin cookie 3...

CVE-2022-33075

CVE-2022-33075 Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.htm...

kalimux

...

CVE-2021-41773

CVE-2021-41773 Playground This is a small Docker recipe for setting up a Debian bookworm based container with an instance of the Apache HTTPd 2.4.49 that is vulnerable to CVE-2021-41773. CGI has been explicitly enabled so it can be used to test/verify Local file Disclosure behavior as well as...

thinkphp5.XRce

ThinkPHP5.0 Vulnerability Detection Script Rewritten based on @tdcoming's script Introduction: Affected versions: v5.1.x 5.1.31 v5.0.x = 5.0.23 Usage: 1. pip install -r requirements.txt 2. Create url.txt in the script directory 3. Put the URLs to be tested into it 4. Run the script Screenshot:...

certPinningVulnerableOkHttp

OkHttp simple-client app vulnerable to CVE-2016-2402 This is a fork of the default simple-client from the okhttp project. Simple-client is a Java app that just does a GET request to https://api.github.com and fetches the names of okhttp's contributors. This fork has been edited so that OkHttp 3.0...

CVE-2023-22527-Godzilla-MEMSHELL

CVE-2023-22527-Godzilla-MEMSHELL Usage ps: The tested version is 8.5.1. Other versions should work, but they haven't been tested. root@kitploit: 内容参考北辰师傅之前的工具 java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar http://xxx...

CVE-2020-17519

Usage & Disclaimer This script is for batch detection of the Apache Flink directory traversal vulnerability CVE-2020-17519. Usage: Python CVE-2020-17519.py urls.txt Each line in urls.txt contains one URL. Vulnerable addresses are output in vul.txt. Affected Versions: Apache Flink 1.11.0, 1.11.1,...

log4j

CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...

NextSploit

🔍 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ⚠️ NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

CVE-2021-41773

CVE-2021-41773 Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49...

CVE-2021-20294-POC

CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc download and compile root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so...

nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

CVE-2023-25136

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...