39 matches found
CVE-2022-22947
CVE-2022-22947 메모리 쉘 주입 세 가지 유형의 메모리 쉘 주입 지원 root@kitploit: Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Godzilla 쉘 주입을 예로 들면 root@kitploit: python3 -t godzilla -u http://127.0.0.1 참고 문서...
CVE-2022-26134_Behinder_MemShell
CVE-2022-26134BehinderMemShell Adresse du projet original : https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL Modifié pour se connecter au shell mémoire Behinder java -jar CVE-2022-26134BehinderMemShell.jar http://192.168.0.193:8090/ password123...
CVE-2023-22527-MEMSHELL
Présentation du projet Ce projet s'inspire du projet de Boogipop https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL et y ajoute les fonctionnalités suivantes : 1. Injection de cheval de Troie Behinder 2. Ajout d'une option de proxy HTTP, utilisable avec -proxy http://127.0.0.1:8080 3...
CVE-2022-22947
Введение Внедрение мемшелла Godzilla через CVE-2022-22947. Поскольку несколько найденных инструментов не имели функции прокси, я создал собственное решение. Использование root@kitploit: main -u http://127.0.0.1:8080 Использование прокси root@kitploit: main -u http://127.0.0.1:8080 -p...
cve-2022-22947-godzilla-memshell
CVE-2022-22947 godzilla-memshell CVE-2022-22947 ゴジラメモリシェル注入...
CVE-2025-55182-GodzillaMemoryShell
В этом репозитории нет README...
CVE-2022-26134-Godzilla-MEMSHELL
CVE-2022-26134-Godzilla-MEMSHELL Utilisation root@kitploit: java -jar CVE-2022-26134.jar motdepasseGodzilla cléGodzilla exemple java -jar CVE-2022-26134.jar pass key Si le shell mémoire a été injecté avec succès mais que Godzilla ne peut pas se connecter, veuillez ajouter l'en-tête suivant dans l...
CVE-2023-22527-Godzilla-MEMSHELL
CVE-2023-22527-Godzilla-MEMSHELL Utilisation ps : Version testée : 8.5.1. D'autres versions fonctionnent probablement aussi, mais n'ont pas été testées. root@kitploit: Contenu basé sur l'outil précédent du maître BeiChen. java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url motdepassegodzilla...
Next.js-Exploit-Tool
Next.js-Exploit-Tool Next.js-Exploit-Tool — outil d'exploitation graphique complet. Introduction Un outil d'évaluation de sécurité autonome ciblant CVE-2025-55182 , développé en Go, doté d'une interface graphique GUI pour effectuer rapidement la détection et la vérification des vulnérabilités...
CVE-2025-55182-GodzillaMemoryShell
CVE-2025-55182-GodzillaMemoryShell справка root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16...
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System LMS popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon. The vulnerability, tracked as...
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182-GodzillaMemoryShell Help Usage: exploi...
Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems
Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called DripDropper. But in an unusual twist, the unknown attackers have been observed patching the exploited vulnerability after securing initial...
A Dive into Earth Baku’s Latest Campaign
Earth Baku has broadened its scope from the Indo-Pacific region to Europe, the Middle East, and Africa. In this blog entry, we examine the threat actor's latest tools, tactics, and procedures...
RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations
A likely China-linked state-sponsored threat actor has been linked to a cyber espionage campaign targeting government, academic, technology, and diplomatic organizations in Taiwan between November 2023 and April 2024. Recorded Future's Insikt Group is tracking the activity under the name...
Exploit for Injection in Atlassian Confluence_Data_Center
Project Introduction This project refers to the project of B...
Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks
Cybersecurity researchers are warning of a "notable increase" in threat actor activity actively exploiting a now-patched flaw in Apache ActiveMQ to deliver the Godzilla web shell on compromised hosts. "The web shells are concealed within an unknown binary format and are designed to evade security...