Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-27532-RCE-Only | Kitploit
Tools/GitHubGitHub/puckiestyle/cve-2023-27532-rce-only
Privilege EscalationVulnerability AnalysisExploitationPenetration TestingCommand and ControlRemote Access Tool
GitHubpuckiestyle/cve-2023-27532-rce-only

CVE-2023-27532-RCE-Only

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Forked Version (RCE Only)

Forked repository and removed the credential leak part. Applied fixes for compilation.

CVE-2023-27532

Proof of Concept code to exploit CVE-2023-27532 and either leak plaintext credentials or perform remote command execution.

Overview

For a detailed analysis of the vulnerability and exploitation please read the Rapid7 AttackerKB Analysis.

Building

Open in Visual Studio. Since the Liberis Veeam.Backup.Common.dll, Veeam.Backup.Interaction.MountService.dll, and Veeam.Backup.Model.dll are included in the project, they do not need to be concerned about.

Usage

Leak the plaintext credentials from the remote server.

root@kitploit:~
> VeeamHax.exe --target 192.168.0.100

VeeamHax1

Run an arbitrary command with local system privileges on the remote server.

root@kitploit:~
> VeeamHax.exe --target 192.168.0.100 --cmd calc.exe

VeeamHax2

VeeamHax3

Credits

Previous research into this vulnerability was performed by:

  • CODE WHITE GmbH
  • Huntress
  • Y4er
Download Tool