CVE-2011-2523

CVE-2011-2523 This was a vulnerability found in the vsFTPd 2.3.4 service, which through port 6200 performs a redirect giving way to an interactive shell, thus interpreting commands. https://www.exploit-db.com/exploits/49757...

CVE-2025-55182

CVE-2025-55182 Proof of concept exploit for CVE-2025-55182. When successful, it will emulate a shell on the remote target over HTTP-POST requests. Works with both HTTP and HTTPS, but skips any certificate checks. Only supports directory changes with absolute paths. How to use 1. Set up the...

SecureForce

SecureForce - Penetration Testing Framework A simplified but highly capable penetration testing framework built for authorized security testing and competitive analysis. SecureForce provides an intuitive interface for exploit management, payload generation, and controlled exploitation. Features...

yari

YARI - YARA Interactive Interactive debugger for the YARA language written in Rust. Debugger directly calls libyara avoiding emulation to get the most accurate results. 🚀 Features: Call functions from modules Get the value of module constants Evaluate complex expressions Check the matches of...

yari

YARI - YARA Interactivo Depurador interactivo para el lenguaje YARA escrito en Rust. El depurador llama directamente a libyara evitando la emulación para obtener los resultados más precisos. 🚀 Características: Llamar a funciones de los módulos Obtener el valor de las constantes de los módulos...

FShell

FShell Description FShell is my implementation of a Forward Shell. It's designed to get an interactive tty using remote code execution through a stageless protocol eg HTTP. Why I should use a forward shell ? The remote server is not able to reach internet, no reverse shell possibility I don't wan...

Supershell

Supershell is a C2 remote control platform accessed through WEB services. By establishing a reverse SSH tunnel, a fully interactive shell can be obtained, and it supports multi-platform architecture Payload...

EUVD-2026-60964

CodeWhale: execshellinteract sends LLM-controlled input to a running shell without an approval prompt privilege escalation...

powerview.py

Installation | Basic Usage | Obfuscation | Modules | Logging | User Defined Rules | MCP | Plugins | Acknowledgements Overview PowerView.py is an alternative for the awesome original PowerView.ps1 script. Most of the modules used in PowerView are available here some of the flags are changed . Main...

CVE-2020-9484

CVE-2020-9484 with interactive mode and args Designed specifically for CTF challenge CERTain Doom on TryHackMe Join Room https://tryhackme.com/r/room/certaindoom Remake of CVE-2020-9484 by Pentestical Shoutout to ChatGPT for the auto creation of interactive mode, and args :...

BruteSploit

Brutesploit BruteSploit es una colección de métodos para generar automáticamente, realizar fuerza bruta y manipular listas de palabras con una shell interactiva. Puede ser utilizado durante una prueba de penetración para enumerar y se puede usar en CTF para manipulación, combinación, transformaci...

kamerka

YA NO ESTÁ SOPORTADO NI DESARROLLADO POR FAVOR, USA LA VERSIÓN GUI https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 alias FIST Flickr, Instagram, Shodan, Twitter Construye un mapa interactivo de cámaras, impresoras, tweets y fotos. El script crea un mapa de cámaras, impresoras, tweets y fotos...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

isip

isip Kit interactivo de SIP para manipulación de paquetes, sniffing, ataques man-in-the-middle, fuzzing, simulación de ataques DoS. Video https://asciinema.org/a/11128 Configuración root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Uso Las...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

training-security-awareness

面向员工的安全意识培训免费课程 — 开源交互式 SCORM 库 130+ 个免费、开源的安全意识培训练习 — 实操型、交互式 SCORM 模块，涵盖网络钓鱼意识培训、GDPR、AI 安全等。专为想要真正记住所学内容并乐于分享的人而打造。 👥 与创始人沟通 | 🔗 浏览完整课程库 | 🎮 尝试实时网络钓鱼意识演示 为什么这个免费安全意识培训与众不同 大多数安全意识培训都令人过目即忘：枯燥的幻灯片、毫无生气的视频，以及最近那种让员工反感的 AI 生成内容。问题不在内容本身 — 而在于形式，因为被动学习无法培养习惯。人们看完一个 10 分钟的视频，点击“完成”，然后在关键时刻什么都记不住。...

CVE-2021-41773_Honeypot

CVE-2021-41773Honeypot https://lopqto.me/posts/building-highly-interactive-honeypots...

gcat

Gcat A stealthy Python based backdoor that uses Gmail as a command and control server This project was inspired by the original PoC code from Benjamin Donnelly This is PoC code... ... that was released for orginazations to test their defenses against these type of attacks. In order to detect them...