xz-vulnerable-honeypot

xz-vulnerable-honeypot An ssh honeypot with the XZ backdoor. CVE-2024-3094 TODO : hook the backdoor and/or sshd. log rsa keys for decryption. notes: https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9f504 https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01...

CVE-2026-82329-JFrog-Artifactory-

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — Bypass de Autenticación en JFrog Artifactory La Vulnerabilidad Bypass de autenticación crítico en JFrog Artifactory versiones 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. La falla permite a un atacante no autenticado falsificar un...

cs50-cybersecurity-final-project

Análisis Técnico del Backdoor en XZ Utils CVE-2024-3094 URL del video: https://www.youtube.com/watch?v=6hpVp7prlO8 Resumen Este repositorio contiene el proyecto final del curso CS50's Introduction to Cybersecurity. El proyecto ofrece un análisis técnico exhaustivo del ataque a la cadena de...

PHPStudy-Backdoor

PHPStudy-Backdoor 后门漏洞复现 phpstudy dll backdoor for v2016 and v2018 0x01 scan search for backdoor dll root@kitploit: D:\Pentester\phpStudypython check.py === .\php\php-5.2.17\ext\phpxmlrpc.dll === @eval%s'%s'; %s;@eval%s'%s'; === .\php\php-5.4.45\ext\phpxmlrpc.dll === @eval%s'%s'; %s;@eval%s'%s';...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck 此脚本用于检查 Citrix Netscaler 是否受到 CVE-2019-19781 攻击的入侵，并收集所有文件系统信息。 将检查以下文件和日志（最新版本 1.13）： 模板文件夹中的 XML 文件 Apache 访问日志文件 Apache 错误日志文件 Cron 任务 后门脚本 加密矿工 Bash 日志文件 开始使用 输出文件将在执行目录中创建。 先决条件 CVE-NetScalerFileSystemCheck.ps1 需要 plink.exe 位于执行目录中，并可在本地计算机上运行。...

ansible-CVE-2024-3094

ansible-CVE-2024-3094 Ansible playbooks 用于检查和修复 CVE-2024-3094 XZ Backdoor。这些 playbooks 是根据 https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/ 的指导开发的。 背景 如果只有一两个系统，运行检查来查看你的 Linux 系统是否存在漏洞很简单，但如果你管理着一大批系统呢？这是我谦逊的尝试，旨在让这个过程的自动化变得稍微容易一些。 这已经在 Ubuntu 22.04 上测试过。 使用说明 预检查 1...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

-CVE-2022-1609

CVE-2022-1609 CVE-2022-1609的Bash PoC WordPress Weblizar后门 如何安装？ root@kitploit: wget https://raw.githubusercontent.com/0xSojalSec/CVE-2022-1609/main/exploit.sh chmod +x exploit.sh ./exploit.sh 如何使用？ root@kitploit: GH0ST3exP10it$ ./exploit.sh http://127.0.0.1:8080 + Targeting http://127.0.0.1:8080 ...

CVE-2019-19033

CVE-2019-19033：Jalios JCMS 10 后门账户 / 认证绕过 I. 漏洞 Jalios JCMS 10 允许攻击者通过一个后门账户（可使用任意用户名和特定密码）以管理权限访问网站的任何部分以及 WebDAV 服务器。 II. CVE 参考 CVE-2019-19033 III. 供应商 Jalios https://www.jalios.com/jcms/j6/en/home IV. 时间线 2019年11月8日 - 发现漏洞 2019年11月9日 - 联系供应商 2019年11月14日 - 供应商修复漏洞 V. 描述...

CVE-2011-2523-poc

CVE-2011-2523-poc 这是一个 Python3 脚本，利用 socket 和 telnetlib 模块对 CVE-2011-2523（VSFTPD 2.3.4 后门命令执行）进行漏洞利用 依赖 root@kitploit: sudo python3 -m pip install pwntools 安装 root@kitploit: git clone https://github.com/4m3rr0r/CVE-2011-2523-poc.git cd CVE-2011-2523-poc/ chmod +x exploit.py 使用 root@kitploit:...

CVE-2025-22968

CVE-2025-22968 D-Link DWR-M972V Software Version 1.05SSG Unauthenticated Access Vulnerability Description Unauthenticated access in the default configuration of the D-Link DWR-M972V Software Version 1.05SSG allows an anonymous attacker to access the router and upload malicious backdoor scripts vi...

CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B Backdoors exploit About Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device. Product Details Product: COMpact 3000 ISDN,...

metasploitable2-vsftpd-writeup

Metasploitable2 — Explotación del Backdoor de vsftpd 2.3.4 Un laboratorio práctico que demuestra el descubrimiento y la explotación de una vulnerabilidad de backdoor conocida en vsftpd 2.3.4, utilizando un entorno aislado Kali Linux ↔ Metasploitable2. Objetivo Practicar el flujo de trabajo...

Exploit for Improper Authentication in Jfrog Artifactory

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — JFrog Arti...

oieh-router-checker

OIEH Router Checker A Windows program that checks with a single click whether your router is affected by the Chinese backdoor ENDLESSDOORS No installation required · No administrator rights required · No external data transmission What Is This? In August 2026, security firm VulnCheck discovered a...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and shellcode for Citrix VPX 13.1-48.47. For the full writeup, click here. Usage NASM is required to build the shellcode. root@kitploit: $ sudo apt install nasm The included shellcode will download and run a shell script from a remote https...

CVE-2011-2523

CVE-2011-2523 Exploitation 🚀 Usage This poc script allows you to exploit the CVE-2011-2523 VsFTPd 2.3.4 Backdoor Command Execution help ⚒️ Installation root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip install pwntools argpar...

xz-backdoor-research

Kit de Investigación CVE-2024-3094 Por Nikolaos Natsopoulos , Consultor de IAM Herramienta interactiva basada en navegador que acompaña al informe de investigación: "CVE-2024-3094: Compromiso de la Cadena de Suministro mediante Ingeniería Social y Manipulación del Sistema de Compilación en XZ...

poisontap

PoisonTap - extrae cookies, expone el router interno e instala una puerta trasera web en ordenadores bloqueados Creado por @SamyKamkar || https://samy.pl Cuando PoisonTap una Raspberry Pi Zero y Node.js se conecta a un ordenador bloqueado/protegido por contraseña , hace lo siguiente: emula un...

webshell

webshell | English | Türkiye 이것은 webshell 수집 프로젝트입니다 장미를 선물하면 손에 향기가 남듯이, 이 프로젝트를 다운로드하셨다면 shell도 제출해 주시기 바랍니다 이 프로젝트는 다양한 일반적인 스크립트를 포함합니다 예: asp,aspx,php,jsp,pl,py 다양한 webshell을 제출할 경우 이름과 비밀번호를 변경하지 마십시오 주의: 모든 shell에 백도어가 있는지 여부는 보장하지 않습니다. 다만 제가 직접 업로드한 것은 절대 고의로 백도어를 추가하지 않습니다 제출하시는 분들도 백도어...