#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
osvaldotenorio/cve-2024-48325Proof-of-concept for SQL injection in Portabilis i-Educar 2.8.0, demonstrating unauthenticated database access via the getDocuments endpoint with…
nthuong95/cve-2018-11235Proof-of-concept exploit for CVE-2018-11235, a remote code execution vulnerability in Git submodules. Demonstrates exploitation of malicious…
chenzhuo0618/testProof-of-concept exploit for CVE-2017-1000117, demonstrating a remote code execution vulnerability in Git.
uzzzval/cve-2004-2167Reproduction and patching guide for CVE-2004-2167, a buffer overflow in LaTeX2RTF, with a C exploit and patch for educational vulnerability analysis.
patrickdeanramos/cve-2024-41302-bookea-tu-mesa-is-vulnerable-to-sql-injectionBookea-tu-Mesa is vulnerable to SQL Injection
mbadanoiu/magnolia-8281MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS
lycshub/cve-2020-5245Proof-of-concept exploit for CVE-2020-5245, demonstrating expression language injection in Dropwizard REST endpoints via crafted HTTP parameters.
edgarloyola/cve-2021-40905Proof-of-concept exploit for CVE-2021-40905, a remote code execution vulnerability in CheckMK Management Web Console via crafted .mkp extension…
eqstlab/cve-2024-23998PoC for CVE-2024-23998
cybercrowcc/cve-2024-48990Technical analysis and proof-of-concept for CVE-2024-48990, a privilege escalation vulnerability in needrestart allowing local attackers to execute…
compliancecontrol/cve-2024-56115CVE-2024-56115 proof-of-concept for Amiro.CMS XSS and OS command injection vulnerabilities, enabling security researchers to test and validate…
wilss0n/cve-2024-4577Proof-of-concept exploit for CVE-2024-4577 enabling remote code execution in vulnerable PHP versions 8.1-8.3. Includes customizable arguments for…
rodfer0x80/log4j2-prosecutorCVE-2021-44228
okanulkr/curveball-cve-2020-0601-pocProof-of-concept exploit for CVE-2020-0601 (CurveBall) demonstrating ECC certificate validation bypass to spoof trusted CA and sign arbitrary…
mkelepce/cve-2020-12629osTicket 1.14.1 - Persistent Authenticated Cross-Site Scripting
hopsypopsy8/cve-2024-53677-exploitationStep-by-step walkthrough for exploiting Apache Struts CVE-2024-53677 RCE via file upload manipulation, including OGNL injection, payload embedding,…
d0n601/cve-2024-13869Migration,Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
coblax/cve-2018-6574Proof-of-concept exploit for CVE-2018-6574, a remote code execution vulnerability in Go's net/http package via crafted HTTP/2 requests.
