Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-24799 — Exploits GLPI CVE-2025-24799 via unauthenticated time-based blind SQL injection to extract usernames and password hashes from glpi_users for authorized security testing. | Kitploit
Tools/GitHubGitHub/rosemary1337/cve-2025-24799
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration TestingArchived
GitHubrosemary1337/cve-2025-24799

CVE-2025-24799

Exploits GLPI CVE-2025-24799 via unauthenticated time-based blind SQL injection to extract usernames and password hashes from glpi_users for authorized security testing.

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-24799 Auto Exploit

Python Status Author

⚡ Overview

CVE-2025-24799 is a proof-of-concept (PoC) exploit targeting GLPI.
This exploit demonstrates unauthenticated SQL Injection (time-based blind) to extract user credentials.

Disclaimer: This PoC is for educational purposes only. Do not use on systems without permission.

🛠 Features

  • Detects glpi_users table and required columns (name and password)
  • Extracts usernames and passwords sequentially
  • Time-based blind SQL injection for unauthenticated exploitation
  • Colorful console output with status, success, failure, and info messages
  • Works on Python 3.x with minimal dependencies

    • ⚙️ Installation

    1. Clone the repository:
    root@kitploit:~
    git clone https://github.com/Rosemary1337/CVE-2025-24799.git
cd CVE-2025-24799
    1. Install dependencies:
    root@kitploit:~
    pip install -r requirements.txt

    Requirements: requests, colorama, beautifulsoup4

    🚀 Usage

    root@kitploit:~
    python3 main.py -u <TARGET_URL>

    Example:

    root@kitploit:~
    python3 main.py -u http://target.com/index.php/ajax

    Arguments

    FlagDescriptionRequiredDefault
    -u, --urlTarget URLYes-

    🎨 Output

    The console shows:

    • Status messages [•]
    • Success [✔]
    • Fail [✖]
    • Info [i]

    Example:

    root@kitploit:~
    [•] Exploiting CVE-2025-24799...
[✔] Table 'glpi_users' found.
[✔] Required columns verified.
[i] Starting credential extraction...

[+] Credential 1: admin:5f4dcc3b5aa765d61d8327deb882cf99
[+] Credential 2: user:123456
[*] Extraction complete.

    🔐 Security & Disclaimer

    • For educational & testing purposes only.
    • Do not attack websites without explicit permission.
    • Use in a controlled lab or authorized penetration test only.

    🔗 Connect with Me

    I'm an active developer who enjoys building tools and sharing knowledge. You can reach me through:

    Download Tool