Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
NagiosXI-RCE-all-version-CVE-2021-40345 — RFI to RCE Nagios/NagiosXI exploitation | Kitploit
Tools/GitHubGitHub/arianeblow/nagiosxi-rce-all-version-cve-2021-40345
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubarianeblow/nagiosxi-rce-all-version-cve-2021-40345

NagiosXI-RCE-all-version-CVE-2021-40345

RFI to RCE Nagios/NagiosXI exploitation

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
244 years agoNot yet reviewed
Share

NagiosXI RCE File-Upload

CVE-2021-40345

Authentified RFI to RCE Nagios/NagiosXI exploitation

Step 1 : Go on the "dashlets" managing page and download one of them (I'm using "rss_dashlet" for the exemple) :

root@kitploit:~
http://TARGET_IP/nagiosxi/admin/dashlets.php?download=rss_dashlet

Step 2 : Modify the *.inc.php (I'm gonna use a tiny PHP reverse shell oneliner in line 34 for the exemple) :

nagios1

Step 3 : Start your listener and upload the malicious dashlet in the dashlets managing page :

nagios2

And voilà, you got the shell !

Download Tool