Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-24799 — Exploits GLPI CVE-2025-24799 via unauthenticated time-based blind SQL injection to extract usernames and password hashes from glpi_users for authorized security testing. | Kitploit
Tools/GitHubGitHub/rosemary1337/cve-2025-24799
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubrosemary1337/cve-2025-24799

CVE-2025-24799

Exploits GLPI CVE-2025-24799 via unauthenticated time-based blind SQL injection to extract usernames and password hashes from glpi_users for authorized security testing.

View Repository
11 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-24799 Auto Exploit

Python Status Author

⚡ Overview

CVE-2025-24799 is a proof-of-concept (PoC) exploit targeting GLPI.
This exploit demonstrates unauthenticated SQL Injection (time-based blind) to extract user credentials.

Disclaimer: This PoC is for educational purposes only. Do not use on systems without permission.

🛠 Features

  • Detects glpi_users table and required columns (name and password)
  • Extracts usernames and passwords sequentially
  • Time-based blind SQL injection for unauthenticated exploitation
  • Colorful console output with status, success, failure, and info messages
  • Works on Python 3.x with minimal dependencies

⚙️ Installation

  1. Clone the repository:
root@kitploit:~
git clone https://github.com/Rosemary1337/CVE-2025-24799.git
cd CVE-2025-24799
  1. Install dependencies:
root@kitploit:~
pip install -r requirements.txt

Requirements: requests, colorama, beautifulsoup4

🚀 Usage

root@kitploit:~
python3 main.py -u <TARGET_URL>

Example:

root@kitploit:~
python3 main.py -u http://target.com/index.php/ajax

Arguments

FlagDescriptionRequiredDefault
-u, --urlTarget URLYes-

🎨 Output

The console shows:

  • Status messages [•]
  • Success [✔]
  • Fail [✖]
  • Info [i]

Example:

root@kitploit:~
[•] Exploiting CVE-2025-24799...
[✔] Table 'glpi_users' found.
[✔] Required columns verified.
[i] Starting credential extraction...

[+] Credential 1: admin:5f4dcc3b5aa765d61d8327deb882cf99
[+] Credential 2: user:123456
[*] Extraction complete.

🔐 Security & Disclaimer

  • For educational & testing purposes only.
  • Do not attack websites without explicit permission.
  • Use in a controlled lab or authorized penetration test only.

🔗 Connect with Me

I'm an active developer who enjoys building tools and sharing knowledge. You can reach me through:

Download Tool