Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-50286 — Metasploit exploit for the CVE-2025-50286. | Kitploit
Tools/GitHubGitHub/x1o3/cve-2025-50286
Exploit FrameworksVulnerability AnalysisWeb Application ExploitationPenetration TestingLearning & EducationPayload Development
GitHubx1o3/cve-2025-50286

CVE-2025-50286

Metasploit exploit for the CVE-2025-50286.

View Repository
4 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Grav Admin Direct Install RCE (CVE-2025-50286)

Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality.

Overview

  • CVE: CVE-2025-50286
  • Impact: Authenticated RCE
  • Vector: Admin panel → Direct Install
  • Result: Arbitrary command execution with web server privileges

References

  • CVE
  • NVD
  • Exploit-DB

Load Module in Metasploit

root@kitploit:~
cp grav_admin_direct_install_rce_cve_2025_50286.rb ~/.msf4/modules/exploits/linux/http/
msfconsole
reload_all

Exploitation Flow

  • Authenticate to /admin
  • Upload crafted plugin archive
  • Trigger plugin execution
  • Obtain reverse shell

Disclaimer

For educational and authorized security research purposes only.

Download Tool