BetterRAT

Information BetterRAT is InfinityRATDiamondRAT Based Next Generation RAT All responsibilities are at your own risk. Please use it only for research purposes. Feature Remote Desktop Remote Connection Controller Remote Keylogger Remote File Manager Remote TaskManager Remote Script...

wp-file-manager-CVE-2020-25213

WP-file-manager expoit CVE-2020-25213 WP-file-manager wordpress plugin 6.9 vulnerable to unauthenticated arbitary file upload resulting in full compromise of the system. For More more details refer to my writeup published here Disclaimer I haven't discovered this vulnerability & neither taking an...

CVE-2012-2982-Webmin-Exploit

Webmin 1.590 Remote Command Execution Exploit CVE-2012-2982 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2012-2982 , a remote authenticated command execution vulnerability affecting Webmin versions 1.590 and earlier. The vulnerability resides in the /file/show.cgi...

Eden-RAT

Eden-RAT Antecedentes Mientras desarrollaba EgoDrop y DuplexSpy, logré implementar un shell interactivo dentro de una aplicación GUI basada en C. Entonces recordé uno de mis proyectos anteriores que había sido suspendido debido a mi limitada experiencia en desarrollo en ese momento. Por lo tanto,...

WebminRCE-exploit

WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - File Manger privilege exploit Vulnerable application to test this PoC can be found here as a docker image. Prerequisites: Python3 Requests module Description Vulnerability Improper Access Control to Remote Code Execution Safe users Unpriviledged us...

CVE-2026-37067

CVE-2026-37067 Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Remote Code Execution Authenticated 🚨 About the Exploit This is a Bash-based authenticated Remote Code Execution RCE exploit for Tiny File Manager versions = 2.4.6, vulnerable under CVE-2021-40964. The script leverages: Weak upload validation and webroot disclosure, An...

antispy

AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...

CVE-2024-33438

Arbitrary File Upload Leads to RCE CVE-2024-33438 CubeCart After running it, this is the expected output for a successful exploitation: root@kitploit: python3 CubeCartCVE.py http://localhost/admin0Kqnr9.php admin 123456 whoami ,----. ||/ '. / O|| /| / "" / / // / launching exploit ||/ please...

b374k

b374k shell 3.2 Este PHP Shell es una herramienta útil para administradores de sistemas o web para realizar gestión remota sin usar cpanel, conectarse mediante ssh, ftp, etc. Todas las acciones se realizan dentro de un navegador web. Características: Gestor de archivos ver, editar, renombrar,...

wp-file-manager

wp-file-manager WP File Manager 6.9 - Arbitrary File Upload leading to RCE root@kitploit: usage: wp-file-manager.py -h -u URL -f FILE optional arguments: -h, --help show this help message and exit -u URL, --url URL URL of host to check will need http or https -f FILE, --file FILE File of URLS to...

CVE-2022-46604-Responsive-File-Manager

CVE 2022 46604 – Responsive File Manager ⚠️ Disclaimer This repository is intended strictly for educational and research purposes only. The information and code provided here can be used in controlled environments such as private lab machines. Unauthorized use of this code against systems you do...

CVE-2026-37065

CVE-2026-37065 Veno File Manager 项目 4.4.9 版本存在任意文件删除漏洞。 要利用此漏洞，具有 superadmin 角色的已认证攻击者可以向受影响端点发送特制的 POST 请求，使用 url 参数 remove 来控制要删除的文件。无需用户交互。例如，如果删除了根目录下的 index.php 文件，应用程序将停止运行。 https://github.com/user-attachments/assets/5fcf2bd6-cdb3-4758-8d2d-aa491eaadab3...

CVE-2023-46694

CVE-2023-46694 Descubierto por: Federico Zambito con Innovery Resumen Vtenext 21.02 permite a un atacante autenticado subir archivos arbitrarios, lo que resulta en la ejecución remota de código. Esta falla existe debido a que la aplicación no aplica controles de autenticación adecuados al acceder...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

CVE-2025-56399

Explotación Masiva CVE-2025-56399 CVE-2025-56399 – Ejecución Remota de Código en laravel-file-manager v3.3.1. Explota la configuración incorrecta en Laravel File Manager para subir y verificar un shell PHP mediante carga de archivos sin autenticación. Instalación Descargar repositorio...

b4tm4n

B4TM4N PHP WEBSHELL Login Account Default root@kitploit: Username : k4mpr3t Password : k4mpr3t Features root@kitploit: 0 File Manager 1 Sec. Info 2 Simply Database 3 Interactive terminal 4 PHP Reverse Back Connect 5 Run PHP Code 6 Custom Toolz 7 Self Script Encryptor ! 8 Error Handler 9 Themes Se...

b4tm4n

B4TM4N PHP WEBSHELL Cuenta de inicio de sesión por defecto root@kitploit: Usuario : k4mpr3t Contraseña : k4mpr3t Características root@kitploit: 0 Administrador de archivos 1 Info de seguridad 2 Base de datos simple 3 Terminal interactiva 4 Conexión inversa PHP Reverse Back Connect 5 Ejecutar códi...

CVE-2025-48703

🛡️ CVE-2025-48703 - Remote Code Execution RCE in cPanel File Manager 📌 Description CVE-2025-48703 is a Remote Code Execution RCE vulnerability in the filemanager module of a web hosting control panel e.g., cPanel. It occurs due to unsanitized input handling in the acc=changePerm function, which...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Te presentamos Tiny File Manager WH1Z-Edition, la solución compacta y eficiente para gestionar tus archivos y carpetas con funciones mejoradas de privacidad y seguridad. Se acabaron los días de depender de recursos externos: he reducido el código a su núcleo,...