Lucene search
+L

35582 matches found

Kitploit
Kitploit
added 2026/09/23 8:39 p.m.9 views

tinyshell

tinyshell Small PHP shell, Controlled by Python Client , connecting over protocol method features connect with direct session with no need for reverse connection . support password protection . can be binded to any file with no damage . using GET/POST request with error handling . usage the proje...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 8:38 p.m.22 views

revsh

revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. News 2018-08-09 : New release. Mosly bug / stability fixes and better documentation on the build process with OpenSSL 1.1.0. See the Installation...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/23 8:36 p.m.11 views

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 8:35 p.m.8 views

CVE-2022-1292

CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

10CVSS7.5AI score0.82612EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/23 8:32 p.m.8 views

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/23 8:28 p.m.9 views

EggShell

EggShell About EggShell is a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location...

6.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/23 8:27 p.m.18 views

DAws

Hello everyone, About There's multiple things that makes DAws better than every Web Shell out there: 1. Bypasses Security SystemsIPS, WAFs,etc like Suhosinuses up to 20 php functions just to get a command executed. 2. Drops CGI Shells and communicate with them to bypass Security Systems. 3. Uses...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 8:26 p.m.9 views

ASPX_WebShell_COFFLoader

ASPX Web Shell with COFF Loader Based on TrustedSec's CSCOFFLoader Description This ASPX web shell enables execution of Beacon Object Files BOFs on a target server using a semi-interactive Python client. It leverages a COFF loader implementation derived from TrustedSec’s CSCOFFLoader. This projec...

6.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/23 8:26 p.m.15 views

Eden-RAT

Eden-RAT Background While developing EgoDrop and DuplexSpy, I successfully implemented an interactive shell within a C-based GUI application. I then recalled one of my earlier projects that had been suspended due to my limited development experience at the time. Therefore, I decided to revisit an...

6.3AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/23 8:18 p.m.12 views

WSL_Payload_Builder

WSL Payload Builder Aviso legal Esta herramienta está pensada para la investigación legítima de seguridad y las pruebas de penetración. Los usuarios son responsables de asegurarse de contar con la autorización adecuada antes de probar sistemas que no poseen o para los que no tienen permiso...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 8:17 p.m.10 views

CVE-2016-2067

ADRENO GPU IOMMU DMA EXPLOIT Tested under Nexus 6p google/angler/angler:6.0.1/MMB29M/2431559:user/release-keys About the bug Discussed in 2016 via Blackhat EU About the exploit With iommu dma writes, vdso.so is overwritten with shellcode. So after /init executes kernelclockgettime, the shellcode...

9.3CVSS7.7AI score0.00679EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 8:12 p.m.9 views

ShellUpload

ShellUpload kurosava.php kurosava.php is a malicious PHP web shell uploader...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 8:09 p.m.13 views

c2-cloud

关于项目 C2 Cloud 是一个强大的基于网页的 C2 框架,旨在简化渗透测试人员的工作。它允许像在 AWS 云中访问 EC2 实例一样轻松地访问被攻陷的后门。通过用户友好的界面,它可以管理多个同时进行的后门会话。 C2 Cloud 是开源的。安全分析师可以自信地进行模拟,获得宝贵的经验,并为其组织的主动防御态势做出贡献。 支持的反弹 Shell: 1. Reverse TCP 2. Reverse HTTP 3. Reverse HTTPS(配置在负载均衡器后面) 4. Telegram C2 演示 C2 Cloud 演练: https://youtu.be/hrHTRDcGj8 使...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 8:09 p.m.7 views

CVE-2017-7269

EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...

10CVSS8.9AI score0.99823EPSS
SaveExploits41
Kitploit
Kitploit
added 2026/09/23 8:02 p.m.14 views

YAPS

YAPS - Y et A nother P HP S hell Yes, as the name reveals, this is yet another PHP reverse shell, one more among hundreds available out there, but with some advantages. It is a single PHP file containing all its functions and you can control it via a simple TCP listener e.g. nc -lp 1337. In the...

7.8CVSS7.3AI score0.94921EPSS
SaveExploits155References5
Kitploit
Kitploit
added 2026/09/23 8:02 p.m.15 views

outis

outis outis is a custom Remote Administration Tool RAT or something like that. Think Meterpreter or Empire-Agent. However, the focus of this tool is neither an exploit toolkit there are no exploits nor persistent management of targets. The focus is to communicate between server and target system...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/23 7:57 p.m.11 views

Lenovo-CVE-2025-8061

Lenovo-CVE-2025-8061 PoC para obtener una shell de sistema explotando el controlador LnvMSRIO.sys 3.1.0.36. Todo el crédito es para el autor original Luis Casvella de Quarkslab. Esto funciona contra el último Windows 11 Versión 24H2 ¡con KVAShadowing y Core Isolation desactivados! !NOTE Esto fue...

7.3CVSS7.1AI score0.00385EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/23 7:56 p.m.11 views

fix-react2shell-next

fix-react2shell-next Un comando para corregir CVE-2025-66478 React 2 Shell RCE en tu aplicación Next.js / React RSC. root@kitploit: npx fix-react2shell-next Incrementos de versión deterministas según los avisos oficiales. Qué hace 1. Escanea recursivamente todos los archivos package.json admite...

7.7AI score
SaveExploits112
Kitploit
Kitploit
added 2026/09/23 7:54 p.m.10 views

msmap

MSMAP Msmap是一个内存马生成器,兼容多种容器、组件、编码器、 WebShell / Proxy / Killer 和管理客户端。English 背后的想法(一),背后的想法(二), 背后的想法(三) 功能 WIP Function 动态菜单 自动编译 生成脚本 精简模式 图形界面...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/23 7:54 p.m.14 views

Jatayu

JATAYU Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE...

5.9AI score
SaveExploits0
Rows per page
Query Builder