Lucene search
+L

39 matches found

Kitploit
Kitploit
added 2026/09/02 9:42 p.m.3 views

CVE-2022-22947

CVE-2022-22947 메모리 쉘 주입 세 가지 유형의 메모리 쉘 주입 지원 root@kitploit: Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Godzilla 쉘 주입을 예로 들면 root@kitploit: python3 -t godzilla -u http://127.0.0.1 참고 문서...

10CVSS7AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/02 5:52 p.m.3 views

CVE-2022-26134_Behinder_MemShell

CVE-2022-26134BehinderMemShell Исходный проект: https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL Изменено для подключения к оболочке Behinder в памяти. java -jar CVE-2022-26134BehinderMemShell.jar http://192.168.0.193:8090/ password123...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits77References1
Kitploit
Kitploit
added 2026/09/02 1:25 p.m.3 views

CVE-2023-22527-MEMSHELL

О проекте Этот проект основан на проекте Boogipop https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL и добавляет к исходному проекту поддержку: 1. Внедрение memory-shell memshell Behinder 2. Добавлена поддержка HTTP-прокси: параметр -proxy http://127.0.0.1:8080 3. Изменён код, отвечающи...

10CVSS7.4AI score0.99984EPSS
SaveExploits34References2
Kitploit
Kitploit
added 2026/09/02 7:01 a.m.4 views

CVE-2022-22947

Введение Внедрение мемшелла Godzilla через CVE-2022-22947. Поскольку несколько найденных инструментов не имели функции прокси, я создал собственное решение. Использование root@kitploit: main -u http://127.0.0.1:8080 Использование прокси root@kitploit: main -u http://127.0.0.1:8080 -p...

10CVSS7AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/02 2:16 a.m.3 views

cve-2022-22947-godzilla-memshell

CVE-2022-22947 godzilla-memshell CVE-2022-22947 ゴジラメモリシェル注入...

10CVSS7AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/01 8:23 p.m.1 views

CVE-2025-55182-GodzillaMemoryShell

В этом репозитории нет README...

10CVSS7AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/08/31 1:25 p.m.2 views

CVE-2022-26134-Godzilla-MEMSHELL

CVE-2022-26134-Godzilla-MEMSHELL Использование root@kitploit: java -jar CVE-2022-26134.jar 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2022-26134.jar pass key Если Memory Shell успешно внедрён, но Godzilla не может подключиться, добавьте следующий заголовок в конфигурацию запроса или настройте прокси Burp...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/08/31 12:17 p.m.3 views

CVE-2023-22527-Godzilla-MEMSHELL

CVE-2023-22527-Godzilla-MEMSHELL 사용법 참고: 테스트 버전은 8.5.1입니다. 다른 버전도 분명 가능하지만 테스트하지 않았습니다. root@kitploit: 内容参考北辰师傅之前的工具 java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar http://xxxx/ pass key 메모리 쉘이 성공적으로 주입되었지만 고질라가 연결할 수...

10CVSS7.3AI score0.99984EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/08/30 11:58 p.m.3 views

Next.js-Exploit-Tool

Next.js-Exploit-Tool Next.js-Exploit-Tool — графический инструмент для всестороннего использования. Описание Автономный инструмент оценки безопасности для CVE-2025-55182 , разработанный на Go, с графическим интерфейсом GUI для быстрого выявления и проверки уязвимостей. Журнал изменений v1.3.0...

10CVSS7AI score0.99802EPSS
SaveExploits389
Kitploit
Kitploit
added 2026/08/30 11:49 p.m.1 views

CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell справка root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16...

10CVSS7AI score0.99802EPSS
SaveExploits389
The Hacker News
The Hacker News
added 2026/05/26 5:19 a.m.31 views

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System LMS popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon. The vulnerability, tracked as...

7.5CVSS6.5AI score0.01008EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2026/03/09 7:21 a.m.16 views

Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/10 12:28 p.m.176 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182-GodzillaMemoryShell Help Usage: exploi...

10CVSS7.1AI score0.99802EPSS
SaveExploits389
The Hacker News
The Hacker News
added 2025/08/19 5:37 p.m.12 views

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called DripDropper. But in an unusual twist, the unknown attackers have been observed patching the exploited vulnerability after securing initial...

10CVSS8.5AI score0.99723EPSS
SaveExploits33
Trend Micro Simply Security
Trend Micro Simply Security
added 2024/08/09 12:00 a.m.24 views

A Dive into Earth Baku’s Latest Campaign

Earth Baku has broadened its scope from the Indo-Pacific region to Europe, the Middle East, and Africa. In this blog entry, we examine the threat actor's latest tools, tactics, and procedures...

7.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/06/24 7:49 a.m.91 views

RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations

A likely China-linked state-sponsored threat actor has been linked to a cyber espionage campaign targeting government, academic, technology, and diplomatic organizations in Taiwan between November 2023 and April 2024. Recorded Future's Insikt Group is tracking the activity under the name...

7.2CVSS8.6AI score0.83524EPSS
SaveExploits91
GithubExploit
GithubExploit
added 2024/02/26 2:34 a.m.347 views

Exploit for Injection in Atlassian Confluence_Data_Center

Project Introduction This project refers to the project of B...

10CVSS7.5AI score0.99984EPSS
SaveExploits34
The Hacker News
The Hacker News
added 2024/01/22 3:40 a.m.109 views

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

Cybersecurity researchers are warning of a "notable increase" in threat actor activity actively exploiting a now-patched flaw in Apache ActiveMQ to deliver the Godzilla web shell on compromised hosts. "The web shells are concealed within an unknown binary format and are designed to evade security...

10CVSS8.2AI score0.99723EPSS
SaveExploits33
GithubExploit
GithubExploit
added 2022/08/23 6:38 a.m.268 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

It is an exploit module/toolkit targeting Apache Log4j. The targ...

10CVSS9.2AI score0.98253EPSS
SaveExploits54
GithubExploit
GithubExploit
added 2022/05/16 3:27 p.m.692 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expres...

10CVSS7.3AI score0.98253EPSS
SaveExploits54
Rows per page
Query Builder