CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...

rdroid

This project is unmaintained as of now, but as I get time In next few months, probably, It will be fixed to work. rdroid Remotely manage your android phone AKA RAT ! History! I worked on this project during highschool, in year 2011-2012. Since, I wasn't familier with versioning systems, Hence,...

-CVE-2023-30845

CVE-2023-30845 This is a script for CVE 2023-30845 automatically across multiple subdomains Metódos de uso: CLONE REPOSITORY| GIVE PERMISSION TO THE FILE| RUN THE FILE ---|---|--- https://github.com/himori123/-CVE-2023-30845.git| chmod +x CVE-2023-30845.sh| ./CVE-2023-30845.sh...

micr0_shell

micr0 shell Micr0shell es un script ligero y eficiente en Python diseñado para generar dinámicamente shellcode de reverse shell independiente de posición PIC libre de nulos para Windows X64. Dependiendo de las opciones seleccionadas, el shellcode generado puede ser hasta 27 bytes más pequeño que ...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 IoC Detection Tool This script is intended to be executed locally on an F5 BIG-IP in Advanced Shell bash by a user with root privileges; it is not intended to be run in any other setting. Note: Appliance Mode does not allow access to Advanced Shell, and therefore this tool cannot be...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2007-2447

CVE-2007-2447 Samba Exploit A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian. Vulnerability Description CVE-2007-2447 is a command injection vulnerability in Samba versions 3.0.0 through 3.0.25rc3. The vulnerability exists in the SamrChangePassword...

CVE-2023-28771-PoC

CVE-2023-28771-PoC PoC for CVE-2023-28771 based on Rapid7's excellent writeup Requires the scapy Python library for sending IKE packets. usage: CVE-2023-28771-poc.py -h --cmd CMD --lhost LHOST --lport LPORT rhost positional arguments: rhost options: -h, --help show this help message and exit --cm...

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

RedbloodC2

Public version of Redblood C2 This is a simple command and control server to handle sessions and your victims installation $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage After install node.js and and all modules from npm execute: node...

CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...

PSAsyncShell

PSAsyncShell PSAsyncShell es una Shell TCP Inversa Asíncrona escrita en PowerShell puro. A diferencia de otros reverse shells, todo el flujo de comunicación y ejecución se realiza de forma asíncrona, permitiendo omitir algunos firewalls y algunas contramedidas contra este tipo de conexiones...

rat-shell

Windows Remote Access Trojan RAT using .NET Sockets Client-server binaries and source-code for controlling a remote machine behind a NAT with a command-line shell in Windows. Although the core provides support for communication with multiple RATs, the command-line interface used has limited...

CVE-2018-14772

CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage $ python exploit.py -h usage: exploit.p...

CVE-2020-5844

CVE-2020-5844 RCE autenticado en PandoraFMS 7.0-NG 742 Atacantes con privilegios de administrador pueden subir documentos PHP maliciosos. Decodificando la ubicación del archivo en base64 los usuarios pueden obtener una shell como usuario apache. Descubierto por TheCyberGeek Script de PoC en Pytho...

hershell

Hershell Shell reverso TCP simple escrito en Go. Utiliza TLS para asegurar las comunicaciones y proporciona una función de fijación de huella digital de clave pública del certificado, evitando la interceptación del tráfico. Los sistemas operativos compatibles son: Windows Linux Mac OS FreeBSD y...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

CVE-2018-2893

This software is for learning and communication purposes only and must not be used for any illegal activities The main purpose of this name is to ride on the popularity of 2893 — a reverse shell generator It is primarily used to generate your own external network nc listening object, hoping to he...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...