Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-31814 — Proof of concept for CVE-2022-31814 | Kitploit
Tools/GitHubGitHub/sh4den/cve-2022-31814
Vulnerability AnalysisExploitationShellcodeWeb Application ExploitationPenetration TestingRed Teaming
GitHubsh4den/cve-2022-31814

CVE-2022-31814

Proof of concept for CVE-2022-31814

View Repository
122 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Download

CVE-2022-31814

This script exploits a vulnerability in pfSense to upload a shell, execute a command, and then delete the shell.

Requirements

  • Python 3.x
  • requests library

Installation

  1. Clone the repository or download the script.
  2. Install the required Python libraries:
    root@kitploit:~
    pip install requests

Usage

root@kitploit:~
python pfsense.py -f <file_with_urls> -c <command_to_execute>
  • -f, --file: Path to a file containing a list of URLs (one per line).
  • -c, --command: Command to execute on the target.
Download Tool

Example

root@kitploit:~
python pfsense.py -f targets.txt -c "id"

Script Details

The script performs the following steps:

  1. Check Endpoint: Verifies if pfBlockerNG is installed on the target.
  2. Upload Shell: Uploads a PHP shell to the target.
  3. Interactive Shell: Executes the provided command on the target.
  4. Delete Shell: Deletes the uploaded shell from the target.

Disclaimer

This script is intended for educational purposes only. Use it at your own risk. The author is not responsible for any misuse or damage caused by this script.