Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-3129 — A exploit script for CVE-2021-3129 | Kitploit
Tools/GitHubGitHub/cc3305/cve-2021-3129
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubcc3305/cve-2021-3129

CVE-2021-3129

A exploit script for CVE-2021-3129

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-3129

Unauthenticated RCE in Laravel Ignition via File Upload

Summary of the CVE

In affected versions of Laravel Ignition a attack can execute arbitrary code because of the insecure usage of file_get_contents() and file_put_contents(). This is only exploitable for websites that use debug mode.

Affected Versions

  • Laravel Ignition < 2.5.2 and Laravel < 8.4.2

Anomalies

  • This exploit needs a php gadget and is therefore using phpggc. You can do this the following ways:
    • If you haven't already cloned: git clone https://github.com/cc3305/CVE-2021-3129.git --recursive --shallow-submodules.
    • Or if you have already cloned in, run this in the local git repo git submodule update --init --depth 1.

References

  • Original Report - Charles Fol, Jan 12 2021
  • First Github POC - SNCKER, Jan 24 2021
  • Github POC - joshuavanderpoll, Aug 16 2023
  • CVE-details - CVSS Score 7.5
Download Tool