39 matches found
CVE-2025-55182-GodzillaMemoryShell
This repository does not have a README...
CVE-2022-22947
CVE-2022-22947 Inyección de webshell en memoria Admite la inyección de tres tipos de webshells en memoria root@kitploit: Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Tomando como ejemplo la inyección del webshell...
CVE-2023-22527-MEMSHELL
Descripción del proyecto Este proyecto hace referencia al proyecto del maestro Boogipop https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL , y sobre la base del proyecto original soporta: 1. Inyección de memoria shell de 冰蝎 2. Añadir funcionalidad de proxy HTTP, uso: -proxy...
CVE-2022-22947
Introducción Inyecta un memshell de Godzilla a través de CVE-2022-22947. Debido a que las pocas herramientas que encontré no tenían función de proxy, construí mi propia solución. Uso root@kitploit: main -u http://127.0.0.1:8080 Usar proxy root@kitploit: main -u http://127.0.0.1:8080 -p...
CVE-2022-26134_Behinder_MemShell
CVE-2022-26134BehinderMemShell Dirección del proyecto original: https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL Modificado para conectar el shell de memoria Behinder java -jar CVE-2022-26134BehinderMemShell.jar http://192.168.0.193:8090/ password123...
CVE-2022-26134-Godzilla-MEMSHELL
CVE-2022-26134-Godzilla-MEMSHELL Uso root@kitploit: java -jar CVE-2022-26134.jar 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2022-26134.jar pass key Si la memoria shell se ha inyectado con éxito pero Godzilla no puede conectarse, agregue el siguiente encabezado de protocolo en la configuración de la...
CVE-2023-22527-Godzilla-MEMSHELL
CVE-2023-22527-Godzilla-MEMSHELL Uso Nota: la versión probada es 8.5.1, otras versiones definitivamente también funcionan, pero no se probaron. root@kitploit: Contenido referenciado de la herramienta anterior del maestro Beichen. java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url contraseña ...
Next.js-Exploit-Tool
Next.js-Exploit-Tool Herramienta integral de explotación con interfaz gráfica para Next.js. Introducción Una herramienta independiente de evaluación de seguridad para CVE-2025-55182 , desarrollada en Go, que ofrece una interfaz gráfica GUI para realizar rápidamente detección y verificación de...
CVE-2025-55182-GodzillaMemoryShell
CVE-2025-55182-GodzillaMemoryShell ayuda root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enabl...
cve-2022-22947-godzilla-memshell
CVE-2022-22947 godzilla-memshell CVE-2022-22947 Godzilla-Memory-Shell injizieren...
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System LMS popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon. The vulnerability, tracked as...
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182-GodzillaMemoryShell Help Usage: exploi...
Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems
Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called DripDropper. But in an unusual twist, the unknown attackers have been observed patching the exploited vulnerability after securing initial...
A Dive into Earth Baku’s Latest Campaign
Earth Baku has broadened its scope from the Indo-Pacific region to Europe, the Middle East, and Africa. In this blog entry, we examine the threat actor's latest tools, tactics, and procedures...
RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations
A likely China-linked state-sponsored threat actor has been linked to a cyber espionage campaign targeting government, academic, technology, and diplomatic organizations in Taiwan between November 2023 and April 2024. Recorded Future's Insikt Group is tracking the activity under the name...
Exploit for Injection in Atlassian Confluence_Data_Center
Project Introduction This project refers to the project of B...
Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks
Cybersecurity researchers are warning of a "notable increase" in threat actor activity actively exploiting a now-patched flaw in Apache ActiveMQ to deliver the Godzilla web shell on compromised hosts. "The web shells are concealed within an unknown binary format and are designed to evade security...