Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-56164-EXP — CVE-2026-56164 EOP Exploit | Kitploit
Tools/GitHubGitHub/sentinel-aidefense/cve-2026-56164-exp
Privilege EscalationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & EducationRed Teaming
GitHubsentinel-aidefense/cve-2026-56164-exp

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-56164-EXP

CVE-2026-56164 EOP Exploit

View Repository
151 month agoNot yet reviewed

Microsoft SharePoint Server Elevation of Privilege - CVE-2026-56164

Functional unauthenticated EOP exploit.

Overview

Missing authentication for critical function (CWE-306) in SharePoint Server user profile and site collection endpoints. Allows remote attackers to escalate from anonymous to Site Collection Administrator / Farm Admin level.

Bypasses auth gate via crafted SOAP payload on /_vti_bin/client.svc.

Affected Versions

  • SharePoint Server Subscription Edition < 16.0.19725.20434
  • SharePoint Server 2019 < 16.0.10417.20175
  • SharePoint Enterprise Server 2016 < 16.0.5561.1001

Root Cause

Insufficient SPContext validation in Microsoft.Office.Server.UserProfiles when X-RequestDigest is omitted with specific header chain.

Usage

root@kitploit:~
python3 cve-2026-56164.py -t https://target.sharepoint.site
file2 (1)

Only -t (target) required. Optional: -u (custom username), -p (custom password).

What the exploit does:

  • Unauthenticated privilege escalation to SCA/Farm Admin
  • Creates persistent backdoor domain user
  • Adds to Farm Administrators
  • Dumps admin list

Exploit

href

Disclaimer

This tool is provided for educational and authorized red team / penetration testing purposes only. The author is not responsible for any misuse, damage, or illegal activity caused by this exploit. Use at your own risk and only on systems you have explicit permission to test.

Download Tool