Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-45612-PoC — Proof of concept for XXE in Ktor (CVE-2023-45612) | Kitploit
Tools/GitHubGitHub/ksaweryr/cve-2023-45612-poc
Vulnerability AnalysisCode AnalysisExploitationWeb Application ExploitationLearning & Education
GitHubksaweryr/cve-2023-45612-poc

CVE-2023-45612-PoC

Proof of concept for XXE in Ktor (CVE-2023-45612)

View Repository
210 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-45612 PoC

This repository contains a proof of concept (PoC) for CVE-2023-45612 which allowed XXE in the default configuration of ContentNegotiation in ktor. The PoC is split into 2 parts:

  • server/, containing an example of a Ktor server using an affected version of Ktor, with an endpoint susceptible to the attack
  • client/, containing a Python script that demonstrates using the XXE vulnerability in the example server to achieve LFI

Reproduction steps

Both the server and the client can be started by running docker compose up from this repository's root directory. After the server starts (might take a couple of seconds), the client will automatically perform the attack.

Download Tool