Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-40348 — POC for CVE-2024-40348. Will attempt to read /etc/passwd from target | Kitploit
Tools/GitHubGitHub/bigb0x/cve-2024-40348
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubbigb0x/cve-2024-40348

CVE-2024-40348

POC for CVE-2024-40348. Will attempt to read /etc/passwd from target

View Repository
3172 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-40348

POC for CVE-2024-40348 Bazaar v1.4.3 and prior. Will attempt to read /etc/passwd from target.

Banner

Overview

This is a bulk scanning and exploitation tool for CVE-2024-40348: Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal. This vulnerability was discovered by 4rdr.

How to Use

Minimum Requirements

  • Python 3.6 or higher

Single Target:

root@kitploit:~
python CVE-2024-40348.py -u http://target:7809 -p /etc/passwd

Bulk Sscan:

root@kitploit:~
python CVE-2024-40348 -f file.txt -p /etc/passwd

Contact

For any suggestions or thoughts, please get in touch with me.

Disclaimer

I like to create my own tools for fun, work and educational purposes only. I do not support or encourage hacking or unauthorized access to any system or network. Please use my tools responsibly and only on systems where you have clear permission to test.

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-40348
  • https://github.com/4rdr/proofs/blob/main/info/Bazaar_1.4.3_File_Traversal_via_Filename.md
Download Tool