Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-20052 — Original standalone Proof-of-Concept exploit and execution harness for CVE-2023-20052 (ClamAV DMG XML Entity Expansion). | Kitploit
Tools/GitHubGitHub/tralsesec/cve-2023-20052
Vulnerability AnalysisExploitationShellcodePenetration TestingLearning & EducationPayload Development
GitHubtralsesec/cve-2023-20052

CVE-2023-20052

Original standalone Proof-of-Concept exploit and execution harness for CVE-2023-20052 (ClamAV DMG XML Entity Expansion).

View Repository
171 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-20052 Exploit

Functional, self-developed Proof-of-Concept (PoC) exploit for CVE-2023-20052, a vulnerability in ClamAV (versions <= 1.0.0, <= 0.105.1, and <= 0.103.7) enabling arbitrary file read via XML Entity Expansion (XXE) during DMG file parsing.

This repository provides an original, standalone execution script to demonstrate the exploit chain, inspect the parsing behavior, and validate defensive detection rules against vulnerable scanning agents.

Demonstration

Exploit Execution

Usage

git clone https://github.com/tralsesec/CVE-2023-20052.git
cd CVE-2023-20052
chmod +x exploit.sh
./exploit.sh

Disclaimer

This software is provided strictly for educational purposes and authorized security testing. The authors are not responsible for any direct or indirect harm, damage, or legal consequences resulting from the use of this tool. Use at your own risk.

Download Tool