Malicious code in telerape (PyPI)

Source: kam193 21e8fc4f3dd969ec103ff1cb8a5bdba0d465bffffabe2615bc38d8e00606cffa Package places a reverse shell in the PTH file. In analyzed versions, the target was on localhost. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-07-telerape...

PT-2026-67288

Name of the Vulnerable Software and Affected Versions Wazuh workflows versions prior to 44bf114 Description A shell injection issue exists in GitHub Actions where attackers can execute arbitrary commands by submitting pull requests containing crafted VERSION.json files. This occurs because shell...

CVE-2026-67308: Improper Neutralization of Special Elements used in an OS Command

Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are directly...

MAL-2026-11424 Malicious code in telerape (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 21e8fc4f3dd969ec103ff1cb8a5bdba0d465bffffabe2615bc38d8e00606cffa Package places a reverse shell in the PTH file. In analyzed versions, the target was on localhost. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in telerape (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 21e8fc4f3dd969ec103ff1cb8a5bdba0d465bffffabe2615bc38d8e00606cffa Package places a reverse shell in the PTH file. In analyzed versions, the target was on localhost. --- Category: MALICIOUS - The campaign has clearly malicious...

CVE-2026-53599

REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with mediaupload permission upload a JPEG/PHP polyglot named shell.php.any.jpg, which web servers with...

CVE-2026-53599

REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with mediaupload permission upload a JPEG/PHP polyglot named shell.php.any.jpg, which web servers with...

CVE-2026-53599

CVE-2026-53599 affects REDAXO CMS versions 5.18.2–5.21.1 where rex_mediapool::isAllowedExtension lets an authenticated backend user with media[upload] permission upload a JPEG/PHP polyglot named shell.php.any.jpg. On servers with multi-extension PHP handlers, this can be executed as the web serve...

Lua / awk Reverse TCP

Reverse TCP shell via Lua or awk minimal hosts / CTF / constrained Unix from kittysploit import class ModulePayload: CLIENTLANGUAGE = "lua" info = "name": "Lua / awk Reverse TCP", "description": "Reverse TCP shell via Lua or awk minimal hosts / CTF / constrained Unix", "category":...

Windows MSBuild / InstallUtil Reverse TCP

AppLocker-style bypass: MSBuild inline C task or InstallUtil-compatible DLL running a C reverse shell. Pair with listeners/multi/reversetcp. from kittysploit import import base64 class ModulePayload: CLIENTLANGUAGE = "msbuild" info = "name": "Windows MSBuild / InstallUtil Reverse TCP",...

Windows VBScript Reverse TCP (csc on-box)

VBScript/cscript delivery vector: writes a tiny C reverse shell, compiles with csc.exe .NET Framework, and runs it — no powershell.exe from kittysploit import import base64 class ModulePayload: CLIENTLANGUAGE = "vbscript" info = "name": "Windows VBScript Reverse TCP csc on-box", "description":...

Python Reverse TCP (thin / EXE stager)

Minimal Python reverse TCP shell. generate returns a compact one-liner; set compileexe=true to build a Windows EXE via Zig getpythonscript. Designed as a thin stager for exploit chains. from kittysploit import class ModulePayload: """Thin Python reverse TCP payload with optional Zig compile-to-EX...

PowerShell Kitty Agent (typed tasks)

PowerShell HTTP polling agent with typed tasks shell/ls/pwd/whoami/cat/download/upload for listeners/multi/reversehttppolling from kittysploit import import base64 from lib.c2.beaconprofile import BeaconProfile from lib.c2.powershellhttppolling import buildpowershellhttppollingscript class...

PowerShell Command Shell, Reverse HTTPS (TLS)

Connect back over TLS SslStream and create an interactive command shell. No native reversehttps listener — terminate TLS on the operator side stunnel, openssl sserver, etc. and forward plaintext to listeners/multi/reversetcp, or use listeners/multi/reversetls for native TLS termination...

Node.js Reverse TCP Shell

Node.js reverse TCP command shell node -e one-liner. Ideal for Node/npm RCE chains. from kittysploit import import base64 import json class ModulePayload: CLIENTLANGUAGE = "javascript" info = "name": "Node.js Reverse TCP Shell", "description": "Node.js reverse TCP command shell node -e one-liner...

Web Command Shell (ASP / ASPX / JSP)

Generate a minimal web command shell for upload/write after web RCE. Pairs with listeners/web/php style interaction or generic HTTP. Default: password-protected cmd execution via GET/POST param. from kittysploit import class ModulePayload: """Web command shells for ASP/ASPX/JSP RCE chains.""" inf...

Windows HTA / mshta Reverse TCP

HTA payload launched via mshta.exe; VBS drops/compiles a C reverse shell with csc.exe no powershell.exe required from kittysploit import import base64 class ModulePayload: CLIENTLANGUAGE = "hta" info = "name": "Windows HTA / mshta Reverse TCP", "description": "HTA payload launched via mshta.exe;...

Windows JScript Reverse TCP (csc on-box)

JScript/cscript delivery vector: writes a tiny C reverse shell, compiles with csc.exe .NET Framework, and runs it — no powershell.exe. Useful when .ps1 execution is restricted AppLocker. from kittysploit import import base64 class ModulePayload: CLIENTLANGUAGE = "jscript" info = "name": "Windows...

Python DNS Reverse Shell

Poll DNS TXT records for commands and exfil output via result queries stdlib UDP DNS — no dnspython required on target. Pairs with listeners/covert/dns. from kittysploit import from lib.c2.dnsreverseagent import buildpythondnsagentscript class ModulePayload: """DNS TXT polling agent — deliverable...

PowerShell Command Shell, Reverse UDP

Connect-back UDP shell line-oriented. Pairs with listeners/multi/reverseudp from kittysploit import import base64 from lib.c2.stagerevasion import powershellprelude class ModulePayload: CLIENTLANGUAGE = "powershell" info = "name": "PowerShell Command Shell, Reverse UDP", "description":...