Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-55449-AstrBot-RCE — AstrBot老版本RCE | Kitploit
Tools/GitHubGitHub/marven11/cve-2025-55449-astrbot-rce
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubmarven11/cve-2025-55449-astrbot-rce

CVE-2025-55449-AstrBot-RCE

AstrBot老版本RCE

View Repository
23110 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Introduction

AstrBot <=3.5.17 hardcodes a JWT secret in the source code, allowing arbitrary plugin uploads and leading to RCE.

Usage

root@kitploit:~
python main.py 'http://127.0.0.1:6185'

Source Code

https://github.com/AstrBotDevs/AstrBot.git

Download Tool