Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-23334 — aiohttp LFI (CVE-2024-23334) | Kitploit
Tools/GitHubGitHub/jhonnybonny/cve-2024-23334
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubjhonnybonny/cve-2024-23334

CVE-2024-23334

aiohttp LFI (CVE-2024-23334)

View Repository
27122 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-23334 PoC

Description

This repository contains a Proof of Concept (PoC) for CVE-2024-23334, demonstrating how malicious actors can exploit vulnerabilities in aiohttp using LFI .

[!CAUTION] Disclaimer: IMPORTANT: This PoC is for educational purposes only. Unauthorized access to computer systems and networks is illegal !!!

Installation

  1. Clone the repository:
    root@kitploit:~
    git clone https://github.com/jhonnybonny/CVE-2024-23334
    cd CVE-2024-23334
    python3 -m venv .env
    chmod +x ./.env/bin/activate
    source ./.env/bin/activate
    pip3 install -r requirements.txt
    

2.Start the server:

root@kitploit:~
python3 server.py

Screenshot 2024-03-19 at 18 47 09

3.Scanner:

root@kitploit:~
nuclei -t aiohttp.yaml -u http://localhost:8081

or

root@kitploit:~
nuclei -t aiohttp.yaml -l aiohttp.csv

Screenshot 2024-03-19 at 18 41 07

Download Tool

3.Exploit:

root@kitploit:~
python3 exploit.py -s http://localhost:8081

Screenshot 2024-03-19 at 18 45 47