postshell

PostShell PostShell은 바인드bind 셸과 백 커넥트back connect 셸을 모두 포함하는 포스트 익스플로잇post-exploitation 셸입니다. 완전한 대화형 TTY를 생성하여 작업 제어job control가 가능합니다. 스텁 크기는 약 14KB이며 Unix 계열 시스템에서 컴파일할 수 있습니다. 스크린샷 연결이 시작된 후의 배너 및 셸과의 상호 작용. 기존의 백 커넥트/바인드 셸을 사용하지 않는 이유는? PostShell은 Python, Perl과 같은 종속성에 대한 의존도를 낮춰 공격자가 보다 쉽게...

postshell

PostShell PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. ScreenShots Banner and interaction with shell after a...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

hoaxshell

hoaxshell ⚡ 이 프로젝트의 최신 버전은 새로워진 페이로드 템플릿이 포함된 HoaxShell 독립형 리스너입니다. https://revshells.com 에서 직접 사용할 수도 있습니다리스너로 hoaxshell을 선택해야 합니다. ⚠️ 2022-10-18 기준으로 hoaxshell은 AMSI에 탐지됩니다malware-encyclopedia. 생성된 페이로드를 사용하려면 난독화해야 합니다. 수동으로 난독화하고 MS Defender를 우회하는 방법에 대한 다음 영상을 확인하세요: Hoaxshell 예시 -...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

CVE-2024-37084-Poc

CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc about CVE-2024-37084 How to use : py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h, --help show...

ExploitTensorflowCVE-2021-37678

CVE-2021-37678 エクスプロイト この脆弱性を悪用するには、まだ脆弱性が存在する バージョン 2.2.3 で Tensorflow を起動するための環境を用意した Docker コンテナを立ち上げる必要があります。 構成は次のとおりです: AMD 64ビットアーキテクチャ、 AVX 命令を実行できる CPU または GPU Python 64ビット バージョン 3.6.9 Pip3 バージョン 20.2.4 Tensorflow バージョン 2.2.3 PyYAML バージョン 3.12 マシンに docker がインストールされているか確認するには、次を実行します:...

wsh

wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2017-0213

CVE-2017-0213 I used the code provided by the Google Project Zero Team here: https://github.com/WindowsExploits/Exploits/tree/master/CVE-2017-0213 The changes I made allow the program to call a powershell oneliner that will give me an Empire agent on the target. I will use this for privilege...

hacks

/\ /\ \ /\ \ /\ /\ \ /:// /::\ \ /::\ \ /:/ / /::\ \ /::/\ /:::\ /:/:\ /::-"\ /::\ /::/ / /::/ / :\ // ;:;-",-" ::// /:/ / /:/ / :\ |:| | ::/ / // // // || // Some random scripts. Just trying to be like the cool kids. Place all the scripts under /usr/local/bin and hack...

CVE-2015-1578

CVE-2015-1578 Achat 0.150 beta7 - Remote Buffer Overflow Rewrite for python3 for the PNPT course. Original: Author KAhara MAnhara Rewritten: in python3 by Giuseppe Aloisi Achat 0.150 beta7 - Buffer Overflow Tested on Windows 7 32bit https://www.exploit-db.com/exploits/36025 give the script a few...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie Cowrie란 무엇인가 Cowrie는 무차별 대입 공격과 공격자가 수행한 셸 상호작용을 기록하도록 설계된 중간높은 상호작용 SSH 및 Telnet 허니팟입니다. 중간 상호작용...

CVE-2020-29669

=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...

CVE-2024-10793

CVE-2024-10793 PoC Set this lines to your hosts file: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install wp-security-audit-log.5.2.1 or olde...

wordpress-shell

wordpress-shell Cheap & Nasty Wordpress Command Execution Shell. Execute Commands as the webserver you are serving wordpress with! Uploaded shell will probably be at /wp-content/plugins/shell/shell.php Install To install the shell, we are assuming you have administrative access to the Wordpress...

CGIShell

CGIShell shellshock CVE-2014-6271 CGI Exploit Use like OpenSSH via CGI Page Use python cgishell.py 'http://www.google.com/cve-2014-6271/poc.cgi' Screenshot Dependence Windows needed pyreadline It is not needed chardet Future Add TestCase HTTP Login Support http transmission gzip compression chard...

CVE-2019-17558_Solr_Vul_Tool

Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...