Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-50094_POC — poc for CVE-2023-50094 (rengine command injection) | Kitploit
Tools/GitHubGitHub/zierax/cve-2023-50094_poc
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubzierax/cve-2023-50094_poc

CVE-2023-50094_POC

poc for CVE-2023-50094 (rengine command injection)

View Repository
1121 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

reNgine 2.2.0 - Command Injection - CVE-2023-50094

Description

This Python script exploits an authenticated command injection vulnerability in reNgine 2.2.0. The exploit targets the nmap_cmd parameter in the Scan Engine configuration, allowing attackers to execute arbitrary commands.

Features

  • User-friendly command-line interface (CLI)
  • Flexible input for base URL, credentials, and Scan Engine ID
  • Automates exploitation for authenticated users

Exploit Details

  • CVE ID: TBD
  • Affected Version: reNgine v2.2.0
  • Tested On: macOS
  • Author on exploit-db: Caner Tercan
  • Author of the POC: Ziad (me)
  • Vendor URL: https://rengine.wiki/
  • Software Link: https://github.com/yogeshojha/rengine

Prerequisites

  1. A running instance of reNgine (v2.2.0).
  2. Valid user credentials with access to the Scan Engine configuration.
  3. Python 3.x with the requests library installed.
Download Tool

Installation

  1. Clone the repository:

    root@kitploit:~
    git clone https://github.com/example/rengine-exploit.git
cd rengine-exploit
pip install requests

  2. Running the script:

    root@kitploit:~
    python poc.py --url http://rengine.target.com --username admin --password securepassword123 --engine-id 2