Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Grafana-8.3-Directory-Traversal — CVE-2021-43798 working exploit | Kitploit

GitHub/davidrxchester/grafana-8.3-directory-traversal

Reconnaissance Vulnerability Analysis Exploitation Web Application Exploitation Information Gathering Penetration Testing

davidrxchester/grafana-8.3-directory-traversal

Grafana-8.3-Directory-Traversal

CVE-2021-43798 working exploit

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

View Repository

1 year ago

CVE-2021-43798 Python script

Description: Grafana 8.3.0 Directory Traversal (Try this if EDB-ID 50581 is not working!)

Original Article: https://ethicalhacking.uk/cve-2021-43798-dissecting-the-grafana-path-traversal-vulnerability/#gsc.tab=0

During a box in OffSec Proving Ground (Fanatastic), I encountered Grafana 8.3.0 and pretty quickly found exploitdb id 50581 but for some reason it was not working.

I found a working PoC on the above article that quickly allowed me to read /etc/passwd and proceed with attacking the box

I decided to build off the PoC so it would be a bit more interactive and allow for quick manual enumeration of files to read