Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-34085 — Simple File List – Unauthenticated RCE Exploit (CVE-2025-34085) | Kitploit
Tools/GitHubGitHub/mrjhaxcore/cve-2025-34085
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubmrjhaxcore/cve-2025-34085

CVE-2025-34085

Simple File List – Unauthenticated RCE Exploit (CVE-2025-34085)

View Repository
121 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

📂 Simple File List – Unauthenticated RCE Exploit (CVE-2025-34085)

⚠️ Exploit Code by: Mrj Haxcore

A fully working Python exploit for the WordPress Simple File List plugin (<= 4.2.3), which is vulnerable to unauthenticated remote code execution (RCE) due to insecure file upload and rename logic.

💣 Vulnerability Summary

  • Plugin: Simple File List (simple-file-list)
  • Version: <= 4.2.3
  • CVE: CVE-2025-34085
  • Impact: Unauthenticated users can upload a PHP file disguised as .png, then rename it to .php and execute arbitrary code.
  • Requirements: No authentication required
  • Exploit Type: File Upload → Rename Bypass → Command Execution

✅ Features

  • 🚀 Fully automated exploit chain
  • 📤 Manual multipart/form-data builder (bypasses 415)
  • 🔁 Rename brute-force for .php, .php5, .phtml, etc.
  • 🛡️ Realistic spoofed headers to bypass WAFs
  • 🐚 Command execution via ?cmd=
  • 🧼 Clean output (no �PNG garbage)

    • 🛠 Usage

    root@kitploit:~
    python3 simple.py https://target.site

[+] Uploading shell as 8dkls0qp.png...
[+] Upload successful.
[+] Trying to rename to: 8dkls0qp.php...
[+] Rename successful: 8dkls0qp.php
[+] Triggering shell: https://target.site/wp-content/uploads/simple-file-list/8dkls0qp.php?cmd=id
[+] Shell output:
uid=33(www-data) gid=33(www-data) groups=33(www-data)

Manual Visit

https://target.site/wp-content/uploads/simple-file-list/8dkls0qp.php?cmd=whoami
    Download Tool