cmsPoc

Attention The project is being refactored: cmsPoc 2.0 Note: The POC library for version 2.0 has not yet been updated with the corresponding interfaces, so it cannot be used. If you need to use it, it is recommended to use version 1.0 first. cmsPoc 1.0 Requirements python2.7 Works on Linux, Window...

ZimbraExploit

ZimbraExploit K8Cscan invoca la vulnerabilidad de ejecución remota de código de Zimbra8.8.11 para GetShell https://www.cnblogs.com/k8gege/p/10822908.html CVE-2019-9621 Zimbra8.8.11 XXE GetShell Exploit...

zentao

zentao Getshell Buscar downloadZipPackage C:\Users\Jas502n\Desktop\xamppfindstr /s /i "downloadZipPackage" zentao\log.txt:module\client\control.php: $result = $this-client-downloadZipPackage$version, $link; zentao\log.txt:module\client\ext\model\xuanxuan.php:public function...

Flink-CVE-2020-17518-getshell

Flink-CVE-2020-17518-getshell Utilice Apache Flink CVE-2020-17518 getshell Ver: https://blog.rakjong.com/2021/01/10/flink-cve-2020-17518-getshell/...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 一键 getshell 用法 python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 成功以后使用哥斯拉链接即可。...

PageMyadmin_file_upload_getshell

Este repositorio no tiene un README...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode root@kitploit: python go.py Enter target URL → select function menu. Detection Target root@kitploit:...

CVE-2014-6287

Script Python3 para CVE-2014-6287 Uso: 1. Iniciar un servicio smb local que aloje nc.exe 2. Ejecutar el script de exploit para obtener una shell...

Struts2-045-Exp

Struts2 S2-045 CVE-2017-5638 Exp Tools Exp Function: Command Execute Get Target Website's Physical Path File Upload Getshell Default Webshell For Chopper Support HTTP/HTTPS Support URL With Any Port Note: Default Webshell's Password is s2045@exp Notice The Project Is Intended For...

DedeCMS-getshell-CVE-2023-2928-

此存储库没有 README。...

CVE-2023-22518

CVE-2023-22518 Confluence CVE-2023-22518 漏洞利用 备份恢复远程代码执行 端点 POST /setup/setup-restore.action 需要有效登录和管理员权限（或绕过身份验证） 文件 xmlexport-20231127-071916-1.zip – 空的 Confluence 备份。恢复此备份将删除所有数据！！！ 替换为任何备份；将其与脚本放在同一文件夹中。 shellplug.jar – 获取 shell 的插件，来自 CVE-2023-22515RCE。 使用方法 python .\CVE-2023-22518.py -h...

zentao-getshell

zentao-getshell Zentao 8.2 - 9.2.1 Frontend Getshell Python Usage python exp.py http://127.0.0.1:81/ jas502n.php...

Phpweb-Getshell-py

Phpweb-Getshell-py Phpweb=2.0.35 Tutorial de uso, consulte www.0-sec.org...

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell Script de getshell automático para thinkphp5.0.1 Resuelve algunos pequeños problemas que se encuentran al usar thinkphp5.0.1, evitando la molestia de la reproducción manual mediante la creación de una rueda propia...

noPac

noPac Exploiting CVE-2021-42278 and CVE-2021-42287 原项目noPac在实现上可能有点问题，导致在本地没有打通，于是参考sam-the-admin项目进行修改。 使用 pip3 install -r requirements.txt GetShell python3 exp.py "domain/Username:Passw0rd" -dc-ip 192.168.0.254 -shell DumpHash python3 exp.py "domain/Username:Passw0rd" -dc-ip 192.168.0.254 -dump...

CVE-2018-2628

weblogic getshell 基于各位前辈的脚本优化了一下让代码能在python3中运行 主要是在windows 参考链接 https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.zh-cn.md https://github.com/0xMJ/CVE-2018-2628 weblogic getshell 测试有无漏洞 python pocweblogic.py your-ip 传入getshell "Weblogic GetShell CVE-2018-2628.exe" your-i...

BinExploit-Bench

BinExploit-Bench: Binary Exploitation Capability Benchmark for...

CVE-2026-33310

Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell, the command ma...

SUSE CVE-2026-33310

Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell, the command ma...

CVE-2026-33310

Intake is a package for finding, investigating, loading and disseminating data. Prior to version 2.0.9, the shell syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell, the command ma...