Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2019-10068-PoC — Proof-of-concept exploit for CVE-2019-10068, a deserialization RCE in Kentico CMS, that uploads a web shell for remote command execution. | Kitploit
Tools/GitHubGitHub/crukz404/cve-2019-10068-poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubcrukz404/cve-2019-10068-poc

CVE-2019-10068-PoC

Proof-of-concept exploit for CVE-2019-10068, a deserialization RCE in Kentico CMS, that uploads a web shell for remote command execution.

View Repository
86 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2019-10068 PoC for Kentico CMS

Proof of concept exploit for CVE-2019-10068, leveraging a Deserialization RCE in Kentico CMS to upload a web shell.

Legal Disclaimer: This proof-of-concept is provided for educational and authorised security research purposes only. The author is not responsible for any misuse or damage caused by this code, use it only on systems you own or have explicit permission to test and ensure compliance with all applicable laws.

Usage

  1. Modify the script with the URL of the target system (formatted as https://target.com) on Line 9.
  2. Run the script from your terminal with: python3 cve-2019-10068-poc.py.
  3. Verify the webshell on your target: curl https://target.com/x.aspx?c=whoami.

Happy pwnage!

Download Tool