🖥️ Usage

You will be prompted for:

• Target IP or hostname (e.g., 192.168.1.100)
• Target port (e.g., 8080)

🔍 Features

• ✅ Partial PUT vulnerability check (CVE-2025-24813)
• ✅ Optional screenshot capture (via html2image)
• ✅ Interactive prompts and confirmation before exploitation
• ✅ Color-coded terminal output
• ✅ Logs to report.txt
• ✅ Auto cleanup via HTTP DELETE after 24 hours

⚠️ Safety & Ethics

This PoC is completely innocuous. It does:

• No persistence
• No shell, no command execution
• Just uploads and accesses a static JSP

Use only on systems you are authorized to test.

📸 Example Output

📦 Packaging for GitHub

• This repo is ready for GitHub publishing.
• Add a license of your choice (e.g. MIT).
• Push with:
  root@kitploit:~

  git init
  git add .
  git commit -m "Initial CVE-2025-24813 PoC"
  git remote add origin https://github.com/YOURUSERNAME/cve-2025-24813-poc.git
  git push -u origin main
  

🧼 Cleanup

After 24 hours, the script automatically issues an HTTP DELETE to remove the JSP. You can also remove it manually.

📄 License

MIT or custom license of your choice.

✉️ Contact

Maintained by [Your Name]. For authorized use only.

📛 GitHub Badges

🧩 Full Feature List

• ✅ Interactive CLI for target IP/port input
• ✅ Vulnerability detection via:
  • Partial PUT test
  • Fallback header analysis (Server: Apache/Tomcat)
• ✅ User confirmation before exploitation
• ✅ Harmless proof.jsp upload with no side effects
• ✅ Live verification via HTTP GET
• ✅ Color-coded terminal output (green, yellow, red)
• ✅ Screenshot capture with html2image
• ✅ Auto-cleanup via HTTP DELETE after 24 hours
• ✅ All activity logged to report.txt
• ✅ .gitignore, LICENSE, GitHub badges
• ✅ GitHub Pages + release-ready metadata
• ✅ setup.sh for optional environment prep
• ✅ Disclosure template disclosure.md for blog/report use
• ✅ GitHub banner image banner.png

🧠 Notes

This project is designed to be shared publicly and used responsibly. If you find it useful, consider starring the repo and contributing via issues or pull requests.