Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/disnaming/cve-2022-34169
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationCTFLearning & Education
GitHubdisnaming/cve-2022-34169

CVE-2022-34169

A PoC for CVE-2022-34169, for the SU_PWN challenge from SUCTF 2025

View Repository
31 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-34169 PoC

A (malleable) PoC and solution for the SU_pwn challenge from SUCTF 2025. Based on this issue from the original discoverer (Felix Wilhelm) and this blog post (thanat0s). Tries not to rely as much on hard constants as the existing PoCs out there.

If you want to deliver a different java bytecode payload to e.g. bypass some WAF, just edit RCE.java. Otherwise, RCE command lives at the top of CVE-2022-34169.py.

(web.jar is the handout from SU_pwn)

Setup

root@kitploit:~
docker compose up
curl -X POST -F "File=@output/target.xslt" http://localhost:8080/upload
Download Tool