Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-29895-CactiRCE-PoC — CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds | Kitploit
Tools/GitHubGitHub/stuub/cve-2024-29895-cactirce-poc
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubstuub/cve-2024-29895-cactirce-poc

CVE-2024-29895-CactiRCE-PoC

CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
2312 years agoReviewed by Kitploit

Cacti RCE - CVE-2024-29895

image

Usage:

python3 cve-2024-29895.py -u https://target.com/ -c id

Affecting Cacti versions 1.3.X on DEV builds where cmd_realtime.php is present and POLLER_ID is enabled.

Command Injection is possible via this endpoint, by requesting via GET with payload as HTML Query Parameters

Dork:

Google: inurl:cmd_realtime.php

Shodan: Cacti

Hunter.how: /product.name="Cacti"

FOFA: app="Cacti-Monitoring"

Version Checking

image

Disclaimer

Please exercise caution when using this PoC. It has been strictly developed to serve as a tool automate the validation of the vulnerability. Any misuse caused is at your own responsibility.

Download Tool