39 matches found
CVE-2022-22947
CVE-2022-22947 메모리 쉘 주입 세 가지 유형의 메모리 쉘 주입 지원 root@kitploit: Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Godzilla 쉘 주입을 예로 들면 root@kitploit: python3 -t godzilla -u http://127.0.0.1 참고 문서...
CVE-2022-26134_Behinder_MemShell
CVE-2022-26134BehinderMemShell Исходный проект: https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL Изменено для подключения к оболочке Behinder в памяти. java -jar CVE-2022-26134BehinderMemShell.jar http://192.168.0.193:8090/ password123...
CVE-2023-22527-MEMSHELL
О проекте Этот проект основан на проекте Boogipop https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL и добавляет к исходному проекту поддержку: 1. Внедрение memory-shell memshell Behinder 2. Добавлена поддержка HTTP-прокси: параметр -proxy http://127.0.0.1:8080 3. Изменён код, отвечающи...
CVE-2022-22947
Введение Внедрение мемшелла Godzilla через CVE-2022-22947. Поскольку несколько найденных инструментов не имели функции прокси, я создал собственное решение. Использование root@kitploit: main -u http://127.0.0.1:8080 Использование прокси root@kitploit: main -u http://127.0.0.1:8080 -p...
cve-2022-22947-godzilla-memshell
CVE-2022-22947 godzilla-memshell CVE-2022-22947 ゴジラメモリシェル注入...
CVE-2025-55182-GodzillaMemoryShell
В этом репозитории нет README...
CVE-2022-26134-Godzilla-MEMSHELL
CVE-2022-26134-Godzilla-MEMSHELL Использование root@kitploit: java -jar CVE-2022-26134.jar 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2022-26134.jar pass key Если Memory Shell успешно внедрён, но Godzilla не может подключиться, добавьте следующий заголовок в конфигурацию запроса или настройте прокси Burp...
CVE-2023-22527-Godzilla-MEMSHELL
CVE-2023-22527-Godzilla-MEMSHELL 사용법 참고: 테스트 버전은 8.5.1입니다. 다른 버전도 분명 가능하지만 테스트하지 않았습니다. root@kitploit: 内容参考北辰师傅之前的工具 java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar http://xxxx/ pass key 메모리 쉘이 성공적으로 주입되었지만 고질라가 연결할 수...
Next.js-Exploit-Tool
Next.js-Exploit-Tool Next.js-Exploit-Tool — графический инструмент для всестороннего использования. Описание Автономный инструмент оценки безопасности для CVE-2025-55182 , разработанный на Go, с графическим интерфейсом GUI для быстрого выявления и проверки уязвимостей. Журнал изменений v1.3.0...
CVE-2025-55182-GodzillaMemoryShell
CVE-2025-55182-GodzillaMemoryShell справка root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16...
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System LMS popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon. The vulnerability, tracked as...
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182-GodzillaMemoryShell Help Usage: exploi...
Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems
Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called DripDropper. But in an unusual twist, the unknown attackers have been observed patching the exploited vulnerability after securing initial...
A Dive into Earth Baku’s Latest Campaign
Earth Baku has broadened its scope from the Indo-Pacific region to Europe, the Middle East, and Africa. In this blog entry, we examine the threat actor's latest tools, tactics, and procedures...
RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations
A likely China-linked state-sponsored threat actor has been linked to a cyber espionage campaign targeting government, academic, technology, and diplomatic organizations in Taiwan between November 2023 and April 2024. Recorded Future's Insikt Group is tracking the activity under the name...
Exploit for Injection in Atlassian Confluence_Data_Center
Project Introduction This project refers to the project of B...
Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks
Cybersecurity researchers are warning of a "notable increase" in threat actor activity actively exploiting a now-patched flaw in Apache ActiveMQ to deliver the Godzilla web shell on compromised hosts. "The web shells are concealed within an unknown binary format and are designed to evade security...