cve-2017-7269-tool

cve-2017-7269 webshell and shellcode tool build root@kitploit: csc cve-2017-7269.cs usage root@kitploit: CVE-2017-7269 parms Header: -h set host for If header -p set port for If header -s set scheme for If header -l length of physical path WebShell: -w upload webshell to server -wp path of webshe...

CVE-2019-2725-POC

CVE-2019-2725-POC CVE-2019-2725-POC Modify the webshell address in the txt file to your own webshell address, then use Burp Suite to send a POST request to the target server, with the request packet content being the content from the txt file...

spring-core-rce

Spring Core RCE/CVE-2022-22965 Affected scope: Spring framework and derivative frameworks with JDK=9 Reference article This script is for learning purposes only. Any legal liability arising from its use for other purposes is solely the responsibility of the user, not the author. 1. Installation...

CVE-2019-2725

CVE-2019-2725 weblogic कमांड इको + webshell अपलोड अस्वीकरण: यह उपकरण केवल सुरक्षा परीक्षण और सीखने के उद्देश्यों के लिए है, अवैध उपयोग निषिद्ध है weblogic कमांड इको + webshell अपलोड स्क्रिप्ट परिचय: यह स्क्रिप्ट weblogic 10.3.6 और 12.1.3 संस्करणों पर परीक्षण की गई है, और python3 में लिखी गई है।...

cve-2020-0688-webshell-upload-technique

एक्सचेंज रिमोट कोड एक्जीक्यूशन cve-2020-0688 - RED TEAM MODE ON आवश्यकता: python3+ यूनिवर्सल cve-2020-0688 के लिए Python कार्यान्वयन, कस्टम कमांड आउटपुट के लिए ASPX वेबशेल का उपयोग करता है यह सिर्फ एक POC है जो सुरक्षा कारणों से कमजोरियों के प्रदर्शन को सुविधाजनक बनाने के लिए है। मैं सभी अवैध...

CVE-2017-12615-EXP

CVE-2017-12615-EXP root@kitploit: .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !:...

FallingSkies-CVE-2023-35885

CVE-2023-35885 Cloudpanel 0-day Exploit Author: @EagleTube, @Mzulfahmy, @farphalabs Github : https://github.com/datackmy/FallingSkies-CVE-2023-35885/blob/main/ Affected version: v2.0.0 – v2.3.0 Patched version: v2.3.1 Vendor homepage: CloudPanel.io Product: CloudPanel References:...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 exploit POC Utilizzo root@kitploit: usage: exploit.py -h -u URL -l LIST -w WEBSHELL optional arguments: -h, --help show this help message and exit -u URL, --url URL Target url, http://localhost:9443 -l LIST, --list LIST List of target url saperated with new line -w...

CVE-2024-27198-RCE

Cyberspace-Mapping-Dork Fofa root@kitploit: app="JETBRAINS-TeamCity" ZoomEye root@kitploit: app:"JetBrains TeamCity" Hunter.how root@kitploit: product.name="TeamCity" Shodan root@kitploit: http.component:"teamcity" Verwendung Ich verwende Python3.9. root@kitploit: pip install requests urllib3 fak...

CVE-2017-12617

versione aggiornata di https://github.com/cyberheartmi9 CVE-2017-12617 CVE-2017-12617 è una vulnerabilità critica di Remote Code Execution RCE scoperta in Apache Tomcat i sistemi con PUT HTTP abilitati impostando il parametro di inizializzazione "read-only" della servlet Default su "false" sono...

CVE-2025-6002

Exploit per CVE-2025-6002 Questo script sfrutta la vulnerabilità di caricamento arbitrario di file autenticato in VirtueMart 4.4.10 CVE-2025-6002, descritta in questo post del blog: https://blog.blacklanternsecurity.com/p/doomla-zero-days Questo script effettua il login a VirtueMart con le...

spring4shell-CVE-2022-22965

Semplice POC di Spring4Shell Controlla se l'endpoint è vulnerabile python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Sfrutta l'endpoint vulnerabile python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Esegui un comando...

VcenterKiller

VcenterKiller -1. Nota Fratelli che configurate un ambiente di vulnerabilità in locale, con vckiller per verificare log4j fallirete quasi sempre, perché in ambiente VMware con modalità NAT, la scheda di uscita del modulo di verifica viene considerata come 127.0.0.1, quindi l'indirizzo del server...

proxylogon-exploit

proxylogon Proof-of-concept-Exploit für CVE-2021-26855 und CVE-2021-27065, der eine nicht authentifizierte Remote-Codeausführung auf Microsoft Exchange ermöglicht, wie in den folgenden Ressourcen beschrieben: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Uno script bash che dimostra lo sfruttamento manuale di CVE-2016-10204 contro un endpoint target, portando al caricamento di una webshell php. Attualmente, la variabile webshell è impostata per un payload MySQL. Può essere sostituita con qualsiasi backend sia necessario...

terraMaster-CVE-2022-24990

terraMaster-CVE-2022-24990 Tool-Beschreibung Schnell-Exploit-Tool für CVE-2022-24990. Einsteiger-Code. Bei Problemen bitte Issues eröffnen. Verwendung main -u http://127.0.0.1:8181 -t pocexp poc Erkennt nur Informationsleckschwachstellen. exp Versucht, ein WebShell hochzuladen. Haftungsausschluss...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerabile a CVE-2022-46604 bypass dell'estensione di creazione file che porta a RCE. L'attuale exploit è scritto in Python 3 e sfrutta la vulnerabilità per caricare una webshell che consente l'esecuzione remota dei comandi...

CVE-2022-28590

CVE-2022-28590 La scoperta originale e il PoC manuale provengono da tuando243: Esiste una vulnerabilità di esecuzione remota di codice RCE in Pixelimity 1.0 tramite admin/admin-ajax.php?action=installtheme. Questo PoC carica una semplice webshell per un'ulteriore esecuzione remota di codice. Ques...

Exploit-CVE-2026-1357

Installare le dipendenze pip3 install pycryptodome requests Exploit di base python3 wpvivi.py http://target.com Webshell personalizzata python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Spiegazione tecnica: Null Byte Key: Quando la...

CVE-2026-5027-Langflow

CVE-2026-5027 e CVE-2026-10520 CVE-2026-25089 explorador: Clonar root@kitploit: git clone https://github.com/Layer-6/CVE-2026-5027-Langflow.git cd CVE-2026-5027-Langflow Uso arquivo exploit.py Teste automático e exploração. root@kitploit: python3 exploit.py -u https://target.com Configurações...