msLDAPDump

msLDAPDump LDAP enumeration tool implemented in Python3 msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the ldap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames...

ShellPop

ShellPop About Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests. Don't waste more time with .txt files storing your Reverse shells! Installation Python 2.7 is required. 3.0+ version wil...

GoSH

GoSH Golang reverse/bind shell generator Description This tool generates a Go binary that launches a shell of the desired type on the targeted host. The shell binary can be compiled for multiple platforms, supports partial polymorphism unique functions' names and can use UDP protocol instead of t...

persisthunt

Linux Persistence Detection, Hunting and Artifact Collection Summary Usage Example Detections Table of Techniques Summary persisthunt.sh helps speed up investigations by collecting targeted persistence-related artifacts and highlighting suspicious patterns commonly associated with Linux persisten...

CVE-2020-0688

CVE-2020-0688 Working Exploit PoC CVE-2020-0688 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

shellerator

Shellerator Shellerator is a simple CLI/TUI tool aimed to help pentesters quickly generate reverse, bind and web shells in multiple programming languages like Bash, Powershell, Netcat, PHP, ASPX, etc. Another similar project for the generation of one-line file downloading commands is based on thi...

CVE-2019-6467

CVE-2019-6467 BIND nxdomain-redirect For educational purposes only Run root@kitploit: $ docker run --rm --name cve-2019-6467 -it -p 53:53/udp knqyf263/cve-2019-6467 Exploit Normal query root@kitploit: $ dig @127.0.0.1 nxdomain.example.com nxdomain can be replaced by anything that means non-existe...

CVE-2017-7494_SambaCry

CVE-2017-7494 SambaCry Exploit Exploit SambaCry CVE-2017-7494 to exploit Samba bind shell without Metasploit If you need to change the port, just change line 68 of bindshell-samba.c and recompile: root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so...

nginxhack

This is a tool that uses an exploit called CVE-2013-2028 to excecute a bind shell on the target server that's running Nginx 1.3.9 or 1.4.0. It can be downloaded here you will need to run it from the command line Usage: nginxhack target target port target bind port...

revsh

revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. News 2018-08-09 : New release. Mosly bug / stability fixes and better documentation on the build process with OpenSSL 1.1.0. See the Installation...

One-Lin3r

One-Lin3r One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy...

metasploitable-pentest-report

Metasploitable 2 — ペネトレーションテストレポート 免責事項: このペネトレーションテストは、教育目的のみで、プライベートで隔離されたVMwareラボ環境において実施されました。実際のシステムには一切アクセスしていません。すべてのIPアドレスは匿名化されています。 概要 フィールド| 詳細 ---|--- テスター| Prafullya Shandilya 標的| Metasploitable 2（意図的に脆弱なVM） 攻撃者| Kali Linux ネットワーク| 隔離されたVMwareホストオンリーラボ 日付| 2026年5月9日 ツール| Nmap...

CVE-2016-2776

CVE-2016-2776 A tale of a DNS Packet, a detailed walk-thru and proof of concept of BIND's CVE-2016-2776. http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html In this repository you will find: Proof-of-Concept namedown.py Metasploit Auxiliary Module namedown.rb...

socks5

socks5 Socks5/Socks5h server and client This project is to add protocol support for the Bridge, or it can be used alone Usage API Documentation Example Support for the CONNECT command Support for the BIND command Support for the ASSOCIATE command License Licensed under the MIT License. See LICENS...

serval

A Netcat style backdoor for pentesting and pentest challenges Serval is a lightweight, easy-to-use, binary for spawning reverse and bind shells for pentests or pentesting exercises. Serval is cross platform and can be compiled for both Windows 32 & 64-bit and Linux 32 and 64-bit. Note: Due to the...

CVE-2022-41114

CVE-2022-41114 Windows Bind Filter Driver Elevation of Privilege Vulnerability. authentication| complexity| vector ---|---|--- not available| not available| not available confidentiality| integrity| availability ---|---|--- not available| not available| not available CVSS Score: not available...

postshell

PostShell PostShell은 바인드bind 셸과 백 커넥트back connect 셸을 모두 포함하는 포스트 익스플로잇post-exploitation 셸입니다. 완전한 대화형 TTY를 생성하여 작업 제어job control가 가능합니다. 스텁 크기는 약 14KB이며 Unix 계열 시스템에서 컴파일할 수 있습니다. 스크린샷 연결이 시작된 후의 배너 및 셸과의 상호 작용. 기존의 백 커넥트/바인드 셸을 사용하지 않는 이유는? PostShell은 Python, Perl과 같은 종속성에 대한 의존도를 낮춰 공격자가 보다 쉽게...

postshell

PostShell PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. ScreenShots Banner and interaction with shell after a...

Open WebUI 'LDAP Empty Password' - Authentication Bypass

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...