Lucene search
+L

350 matches found

Kitploit
Kitploit
added 2026/09/04 6:23 a.m.4 views

CVE-2019-2725

CVE-2019-2725 weblogic command execution + webshell upload Aviso legal: Esta herramienta es solo para fines de prueba y aprendizaje de seguridad. Está prohibido su uso ilegal weblogic command execution + webshell upload Introducción del script: Este script se basa en las versiones weblogic 10.3.6...

9.8CVSS7.2AI score0.99964EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/09/04 5:10 a.m.4 views

CVE-2019-2725-POC

CVE-2019-2725-POC CVE-2019-2725-POC Modify the webshell address in the txt file to your own webshell address, then use Burp Suite to send a POST request to the target server, with the request packet content being the content from the txt file...

9.8CVSS7.2AI score0.99964EPSS
SaveExploits36
Kitploit
Kitploit
added 2026/09/04 4:56 a.m.5 views

terraMaster-CVE-2022-24990

terraMaster-CVE-2022-24990 Tool Introduction A rapid exploitation tool for CVE-2022-24990. Novice code. Feel free to raise issues if you have any problems. Usage main -u http://127.0.0.1:8181 -t pocexp poc Only detect information disclosure vulnerabilities. exp Attempt to upload WebShell...

9.8CVSS7.2AI score0.83553EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/04 12:53 a.m.5 views

CVE-2026-49049

CVE-2026-49049 — Helix3 JoomShaper Joomla Escáner RCE no autenticado vía AJAX Escáner / verificador masivo para CVE-2026-49049 : manejador AJAX no autenticado en el plugin Helix3 Framework para Joomla v1.0 – 3.1.0 , parcheado en 3.1.1+. Solo pruebas autorizadas. Úselo únicamente en sistemas que...

7.5CVSS5.9AI score0.00992EPSS
SaveExploits6References4
Kitploit
Kitploit
added 2026/09/04 12:23 a.m.5 views

FallingSkies-CVE-2023-35885

CVE-2023-35885 Cloudpanel 0-day Exploit Author: @EagleTube, @Mzulfahmy, @farphalabs Github : https://github.com/datackmy/FallingSkies-CVE-2023-35885/blob/main/ Affected version: v2.0.0 – v2.3.0 Patched version: v2.3.1 Vendor homepage: CloudPanel.io Product: CloudPanel References:...

9.8CVSS7.2AI score0.74888EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/03 11:40 p.m.3 views

proxylogon-exploit

proxylogon Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065, which allows for unauthenticated remote code execution on Microsoft Exchange as described in the following resources: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...

9.8CVSS7.3AI score0.99996EPSS
SaveExploits67
Kitploit
Kitploit
added 2026/09/03 7:56 p.m.5 views

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable a CVE-2022-46604 Bypass de extensión de creación de archivos que conduce a RCE. El exploit actual está realizado en Python 3 y explota la vulnerabilidad para subir una webshell que permite la ejecución remota de comand...

8.8CVSS7.2AI score0.08627EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/03 6:06 p.m.4 views

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" How to use I'm using Python3.9. root@kitploit: pip install requests urllib3 faker...

9.8CVSS7.3AI score0.99991EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/09/03 5:46 p.m.4 views

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Un script de bash que demuestra la explotación manual de CVE-2016-10204 contra un endpoint objetivo, que lleva a la subida de una webshell php. Actualmente, la variable webshell está configurada para un payload de MySQL. Esto se puede reemplazar con cualquier backend que...

9.8CVSS7.2AI score0.02082EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 4:38 p.m.5 views

VcenterKiller

VcenterKiller -1. Atención Compañeros que construyen un entorno de vulnerabilidad localmente, al usar vckiller para verificar log4j, generalmente fallará, porque en el entorno de Vmware con modo NAT, la tarjeta de red de salida en el módulo de verificación se determina como 127.0.0.1, por lo que ...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 4:02 p.m.4 views

CVE-2017-12617

versión actualizada de https://github.com/cyberheartmi9 CVE-2017-12617 CVE-2017-12617 vulnerabilidad crítica de ejecución remota de código RCE descubierta en Apache Tomcat Afecta a sistemas con HTTP PUT habilitado configurando el parámetro de inicialización 'read-only' del servlet Default a...

8.1CVSS7.3AI score0.99988EPSS
SaveExploits23References1
Kitploit
Kitploit
added 2026/09/03 3:03 p.m.5 views

cve-2022-29464

cve-2022-29464 Disclaimer root@kitploit: 脚本仅供学习参考,请勿恶意攻击他人网站 如违法乱纪,造成一切后果由使用者自行承担 技术无罪,与作者无关 使用脚本默认同意以上说明! --Author:lowkey0808 Usage root@kitploit: usage: python3 -u url cve-2022-29464 optional arguments: -h, --help show this help message and exit -u 目标url -s 上传的木马,默认上传内置shell.jsp Direct command...

10CVSS7.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/03 2:49 p.m.3 views

struts2-tool

Struts2 漏洞检测与利用工具 s2tool 一个纯 Java 实现的 Struts2 S2-045 / S2-046(CVE-2017-5638)漏洞检测与利用工具。 检测模块覆盖 S2-045 / S2-046 两个漏洞, 利用模块提供命令执行、文件管理、信息获取、交互式 Shell、反弹 Shell、Webshell 上传等能力。 免责声明 :本工具仅用于授权的安全测试、漏洞研究与教学目的。 严禁用于未授权的非法用途,使用者需自行承担一切法律责任。 功能总览...

10CVSS7.3AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/09/03 2:34 p.m.3 views

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

9.8CVSS7.6AI score0.21769EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/03 2:06 p.m.3 views

CVE-2024-25600

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-25600 Exploit WordPress plugin Bricks Builder has RCE vulnerability CVE-2024-25600 WordPress plugin Bricks Builder RCE vulnerability CVE-2024-25600 exploit script, multi-POC hybri...

10CVSS7.4AI score0.88234EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/09/03 1:38 p.m.4 views

CVE-2022-28590

CVE-2022-28590 El descubrimiento original y el PoC manual son de tuando243: Existe una vulnerabilidad de Ejecución Remota de Código RCE en Pixelimity 1.0 a través de admin/admin-ajax.php?action=installtheme. Este PoC sube una webshell simple para ejecución remota de código adicional. Este exploit...

7.2CVSS7.1AI score0.23758EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/03 12:32 p.m.9 views

CVE-2017-12615-EXP

CVE-2017-12615-EXP root@kitploit: .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !:...

8.1CVSS7.2AI score0.99607EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/03 11:48 a.m.3 views

CVE-2025-25257

CVE-2025-25257 - FortiWeb Vulnerability Checker & Exploit A Python-based tool for checking and exploiting CVE-2025-25257 vulnerability in FortiWeb devices. This vulnerability allows SQL injection and remote code execution through a crafted Authorization header. 📋 Description CVE-2025-25257 is a...

9.8CVSS7.9AI score0.99772EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/03 11:17 a.m.2 views

cve-2020-0688-webshell-upload-technique

Exchange Remote Code Execution cve-2020-0688 - RED TEAM MODE ON require: python3+ UNIVERSAL Python implementation for cve-2020-0688, utilizing ASPX webshell for custom command output This just a POC to facilitate vulnerability demostrations for security reasons. I disapprove every illegal actions...

9CVSS7.3AI score0.99965EPSS
SaveExploits29
Kitploit
Kitploit
added 2026/09/03 10:47 a.m.5 views

PocList

PocList A collection of self-written vulnerability POCs and EXPs. After specifying the URL file, the POC script can perform multi-threaded batch scanning of targets for verification; the EXP script can exploit vulnerabilities, such as file reading, uploading webshells, command execution, etc...

5.9AI score
SaveExploits0
Rows per page
Query Builder