backcookie

backcookie Небольшая бэкдор с использованием cookie. ========== root@kitploit: root@kitploit: Example one: python backcookie.py -u http://target.com/shell.php -c namecookie root@kitploit: Example two: python backcookie.py --url http://target.com/shell.php --cookie namecookie Пользовательская...

wordpress_cropimage

WordPress Crop-Image CVE-2019-8943 Un script python3 pour WordPress Crop-Image CVE-2019-8943 Exécution de code à distance RCE authentifiée. Il dépose une backdoor PHP malveillante. Pour commencer Exécution du programme RCE root@kitploit: python3 wprce.py -t http://wordpress.rce/ -u admin -p...

netpwn

netpwn A framework made to automate tasks of pentesting. Written in python 2.7 Modules reverseshell - Creates a reverse shell with python to connect to a specific machine of your choice. sendfile - Allows you to send a file to target server. phpbackdoor - Generates a simple backdoor in php upload...

hiphp

🚨 New Build Available! WebHole now supports all major web languages. Check it out on GitHub: WebHole on GitHub Hiphp Free & Open Source project for creating a backdoor to control PHP-based websites. ✓ Command Line Interface CLI. ✓ Graphical User Interface GUI. ✓ Web Application. ✓ Python Package....

Remot3d

Remot3d - An Easy Way To Exploiting Will be updated soon Remot3d - A tool made to generate backdoor to control and exploit a server where the server runs the PHP Hypertext Preprocessor program. Equipped with a backdoor that has been obsfucated, which means that it shoudl generally be FUD Fully...

tinyshell

tinyshell Small PHP shell, Controlled by Python Client , connecting over protocol method features connect with direct session with no need for reverse connection . support password protection . can be binded to any file with no damage . using GET/POST request with error handling . usage the proje...

bantam

Bantam Un outil avancé de gestion de backdoor PHP, avec une empreinte serveur légère, une communication multi-thread et un outil de génération et d'obscurcissement de payload avancé. Il propose un chiffrement de bout en bout avec des clés de chiffrement uniques par requête et un streaming de...

CVE-2026-4357

The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites...

CVE-2026-4357 Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload

The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites...

CVE-2026-4357

The Embed HTML5 Game WordPress plugin (through version 1.3 ) fails to properly restrict both who can upload files and what file types are permitted via the plugin. This allows unauthenticated attackers to upload PHP backdoors on affected sites, potentially leading to full compromise. The vulnerab...

EUVD-2026-70038

The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites...

CVE-2026-4357 Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload

The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites...

CVE-2015-3306

Exploit ProFTPD CVE-2015-3306 Ce dépôt contient un exploit de preuve de concept PoC en Python pour CVE-2015-3306 ⚠️ Avertissement : Utilisez ceci uniquement sur des systèmes que vous possédez ou pour lesquels vous avez une autorisation explicite de test. L'exploitation non autorisée est illégale...

Remot3d

Remot3d - An Easy Way To Exploiting Will be update soon It's easy to create a backdoor in an instant, the backdoor can be used in a remote process via a Linux terminal on the server that runs the PHP Language program. Made to bypass the system that is disabled on the server, especially for readin...

YAPS

YAPS - Y et A nother P HP S hell Yes, as the name reveals, this is yet another PHP reverse shell, one more among hundreds available out there, but with some advantages. It is a single PHP file containing all its functions and you can control it via a simple TCP listener e.g. nc -lp 1337. In the...

CVE-2021-3156

exploit.py Forké de @worawit, plus court et optimisé. Fonctionne uniquement pour sudo=1.8.23 sur Centos7 Fonctionne à la fois sur le serveur web et les machines Linux backdoor.php backdoor php générée via weevely, mot de passe : "H@rmWsH4rE!". Donne accès à une session SSH en tant qu'Apache si el...

CVE-2016-10033-PoC

CVE-2016-10033-PoC Написал это для PentesterLab Если вы из PentesterLab, не списывайте, так намного лучше учиться. Надеюсь, это кому-нибудь пригодится, если не мне в будущем : Имеет интерактивную оболочку, хороший argparse и т.д. Использование root@kitploit: usage: poc.py -h --target TARGET...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Cet exploit utilise des adresses et du shellcode pour Citrix VPX 13.1-48.47. Pour l'article complet, cliquez ici. Utilisation NASM est nécessaire pour construire le shellcode. root@kitploit: $ sudo apt install nasm Le shellcode inclus téléchargera et exécutera un scri...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Cet exploit utilise des adresses et du shellcode pour Citrix VPX 13.1-48.47. Pour l'article complet, cliquez ici. Utilisation NASM est requis pour construire le shellcode. root@kitploit: $ sudo apt install nasm Le shellcode inclus télécharge et exécute un script shell...

CVE-2021-47758

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality. Authenticated attackers can generate and upload a ZIP plugin with a PHP backdoor that enables...