Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cve-2024-32002-submodule-rce — Proof-of-concept demonstrating CVE-2024-32002 remote code execution via malicious Git submodule hook, targeting Windows and macOS systems. | Kitploit
Tools/GitHubGitHub/jakob-pennington/cve-2024-32002-submodule-rce
ExploitationWeb Application ExploitationPenetration TestingCommand and ControlRed TeamingPayload Development
GitHubjakob-pennington/cve-2024-32002-submodule-rce

cve-2024-32002-submodule-rce

Proof-of-concept demonstrating CVE-2024-32002 remote code execution via malicious Git submodule hook, targeting Windows and macOS systems.

View Repository
112 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-32002 RCE Submodule

A submodule to demonstrate CVE-2024-32002. Demonstrates Remote Code Execution (RCE) by loading a malicious commit hook into the .git directory of the parent repo.

See cve-2024-32002-poc-rce for the working POC that utilises this repo.

What this repo contains

  • A malicous git hook called post-checkout which runs immediately after the clone completes. This git hook simply pops calc in Windows or MacOS.
  • The git hook is located under notexists/hooks for good reason:
    • notexists is needed to make sure the repo clones into an empty directory.
    • hooks is the directory that git looks for git hooks to execute.
Download Tool