Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2022-36067-vm2-POC-webapp

Proof-of-concept web application demonstrating CVE-2022-36067, a vm2 sandbox escape, enabling remote code execution by uploading exploit code to a Node.js server.

View Repository

243 years ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Steps to reproduce

1. maybe install vm2 globally first (npm -install [email protected] -g)

2. run: node index.js

3. visit http://localhost:5000/poc

4. Upload poc file (such as poc2.js) or code and observe RCE

Download Tool

Tools/

GitHub/0x1nsomnia/cve-2022-36067-vm2-poc-webapp

Vulnerability Analysis Exploitation Web Application Exploitation Penetration Testing Payload Development

0x1nsomnia/cve-2022-36067-vm2-poc-webapp