apache__jspwiki_CVE-2019-10089_2-11-0-M4

Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

apache__jspwiki_CVE-2019-10077_2-11-0-M3

Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

ESAFENET CDG - Arbitrary File Download

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...

Eclipse BIRT Viewer - Remote Code Execution

Eclipse BIRT versions 4.8.0 and earlier contain a JSP injection caused by query parameters, letting remote attackers create and access malicious JSP files in the viewer directory, exploit requires sending crafted query parameters. id: CVE-2021-34427 info: name: Eclipse BIRT Viewer - Remote Code...

CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis

CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository contains a Markdown analysis report for CVE-2020-1938 Ghostcat and the image assets used in the report. Contents Report: docs/report/CVE-2020-1938-Analysis-Report.md Images: docs/images Report Scope The report is organized around:...

Adobe-ColdFusion-8-RCE-CVE-2009-2265

Adobe ColdFusion 8 - リモートコマンド実行（RCE）エクスプロイト 概要 このエクスプロイトは、Adobe ColdFusion 8の既知の脆弱性（CVE-2009-2265）を標的とします。悪意のあるJSPペイロードをアップロードしてリバースシェル接続を確立することで、リモートコマンド実行（RCE）を可能にします。 エクスプロイトの詳細 CVE : CVE-2009-2265 脆弱性 : Adobe ColdFusion 8におけるファイルアップロードの不適切な処理。 影響を受けるバージョン : Adobe ColdFusion 8。 影響 :...

jboss-autopwn-1

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

CVE-2019-2618-

CVE-2019-2618 Vulnerability Detection Tool Enter the server URL, username, and password sequentially as prompted. For example: python3 CVE-2019-2618test.py http://127.0.0.1 root root123 The code will return the response body content. You can use the URL provided in the body to check whether the...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

CVE-2024-50379

CVE-2024-50379 Proof of Concept PoC This repository contains a proof of concept PoC script to exploit CVE-2024-50379 , a vulnerability in Apache Tomcat. The vulnerability is a Time-of-Check Time-of-Use TOCTOU race condition that can lead to remote code execution RCE if the server's configuration...

CVE-2024-27198-TeamCity

Mitigation methods: regexp on WAF root@kitploit: REQUESTURI Regex ^\S\?jsp=\S;\.jsp...

CVE-2025-24813-POC

JSP Web Shell 上传器 一个简单的 Python 工具，用于通过 HTTP PUT 请求将一个基础的 JSP Web Shell 上传到一个或多个目标。 ⚠️ 仅用于教育和授权的渗透测试。 Apache Tomcat 存在路径等价/路径遍历漏洞，原因是未正确处理路径中的 ../ 序列。 CVE ID: CVE-2025-24813 Severity: 严重 Reference link: https://github.com/advisories/GHSA-83qj-6fr2-vhqg 🧰 功能 上传一个具有命令执行能力的基础 JSP Shell 支持： 单个目标 -t...

CVE-2022-26135

-CVE-2022-26135- CVE-2022-26135 CVE-2022-26135 poc https://www.xust.edu.cn/cve/index.jsp...

pwnacle-fusion

pwnacle-fusion 针对 Oracle Reports 的自动化利用工具，CVE-2012-3153 / CVE-2012-3152 感谢 @misssudo 披露该漏洞 用法：./pwnacle.rb targeturl payloadurl 此利用程序同时使用这两个 CVE，从你的 payloadurl 上传一个 .jsp shell，之后可通过 /reports/images/shell.jsp 访问。 payloadurl 应包含一个 .jsp 载荷，但稍作修改后实际上可以是任何内容。...

CVE-2021-38163

CVE-2021-38163 - SAP NetWeaver AS Java Desynchronization Vulnerability Description CVE-2021-38163 is a security vulnerability in SAP NetWeaver Application Server AS Java that allows an authenticated attacker to upload arbitrary files to the server, potentially leading to remote code execution RCE...

apache__jspwiki_CVE-2019-10076_2-11-0-M3

Apache JSPWiki 2.11 - Documentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

CVE-2017-12615

curl -X PUT http://34.124.205.159:8080/1.jsp/ -d @- 1.jsp...

CVE-2019-2618

PoC root@kitploit: POST /beawlsdeploymentinternal/DeploymentService HTTP/1.1 Host: 127.0.0.1:7001 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux i686; rv:20.0 Gecko/20100101 Firefox/20.0 Accept: text/html, image/gif, image/jpeg, /; q=.2 Connection: keep-alive username: weblogic password: weblogic...

CVE-2017-12615-Home-Lab

ENGLISH BELOW CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload Lab นี้จำลองช่องโหว่ CVE-2017-12615 Tomcat: Remote Code Execution via JSP Upload เกิดจากการตั้งค่า readonly=false ทำให้สามารถอัปโหลดไฟล์ผ่าน HTTP PUT ได้ รวมถึงไฟล์ .jsp ที่สามารถรันคำสั่ง RCE Features Apache Tomcat 7.0.79...

CVE-2017-12617

开始使用 此概念验证（Proof Of Concept）旨在演示如何利用 CVE-2017-12617 对 Apache Tomcat 服务器进行远程控制。 操作说明 1. 请执行以下命令以启动服务器。 make serverup 2. 执行以下命令以发起攻击并在服务器上上传一个 webshell（需要安装 cURL）。 make attack 如果此命令未自动打开您的浏览器，您可以访问： http://localhost:8080/webshell.jsp?cmd=pwd 现在您将能在浏览器中直接访问服务器上的 webshell。 常见问题 如果您在运行此概念验证时遇到任何问题，请在...