Lucene search
+L

28 matches found

Kitploit
Kitploit
added 2026/09/15 6:32 a.m.6 views

CVE-2023-4450-Attack

CVE-2023-4450-Attack An automated tool for attacking the CVE-2023-4450 vulnerability in JimuReport Introduction This tool is only for security testing, do not use it for illegal purposes! Usage root@kitploit: java -jar CVE-2023-4450-Attack.jar Provides three functions: command execution,...

9.8CVSS7.1AI score0.11503EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 6:24 a.m.7 views

AgentMemshell

AgentMemshell A forked and further developed Agent memory shell based on MemShellParty, making it compatible with mainstream operating systems. Suitable for injecting memory shells into all Java processes in scenarios where command execution has no echo across all JDK versions. Currently only...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 5:54 a.m.5 views

CVE-2024-36401-WoodpeckerPlugin

CVE-2024-36401-WoodpeckerPlugin Introduction Batch detection and exploitation of CVE-2024-36401, supporting custom memory shell injection 1. Batch detection capability 2. The backend has already filtered URLs just provide the URLs 3. Can custom generate memory shell for injection default memory...

9.8CVSS8.2AI score0.99813EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/09/15 4:32 a.m.11 views

GeoServer-Tools-CVE-2024-36401

GeoServer-Tools-CVE-2024-36401 Herramienta de explotación gráfica para CVE-2024-36401, compatible con varias versiones de JDK, eco de comandos e implementación de memshell. Versiones afectadas: GeoServer 2.23.6 2.24.0 = GeoServer 2.24.4 2.25.0 = GeoServer 2.25.2 Recientemente, durante ejercicios ...

9.8CVSS8AI score0.99813EPSS
SaveExploits26References1
Kitploit
Kitploit
added 2026/09/15 3:05 a.m.8 views

MemShellParty

MemShellParty 中文 | English !WARNING This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration tes...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 1:41 a.m.7 views

CVE-2019-18935-memShell

CVE-2019-18935-memShell source CVE-2019-18935-Memshell Compile root@kitploit: 1.Build https://github.com/A-D-Team/SharpMemshell/blob/main/VirtualPath/memshell.cs 2.Convert dll to byte array 3.Replace rawData in memShell.cpp 4.csc /target:module empty.cs 5.cl /c memShell.cpp 6.link /DLL /LTCG...

9.8CVSS7.9AI score0.99737EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/15 12:10 a.m.6 views

CVE-2022-22947

CVE-2022-22947 Memory Shell Injection Supports injection of three types of memory shells root@kitploit: Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Taking Godzilla shell injection as an example root@kitploit: pytho...

10CVSS7.7AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/14 11:01 p.m.12 views

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

9.8CVSS8AI score0.97116EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/14 10:32 p.m.9 views

CVE-2019-18935-bypasswaf

CVE-2019-18935-bypasswaf Modified from the original project: https://github.com/noperator/CVE-2019-18935 1. The attack malicious payload is passed from the cookie 2. Metadata data is passed in through an encrypted interface and deserialized 3. Default proxy 127.0.0.1:8080 4. Default attack payloa...

9.8CVSS7.8AI score0.99737EPSS
SaveExploits16References2
Kitploit
Kitploit
added 2026/09/14 10:13 p.m.5 views

CVE-2020-14882

CVE-2020-14882 Deployment of Behinder Memory Shell As we all know, CVE-2020-14882 is an unauthenticated vulnerability that allows an attacker to execute arbitrary code on affected WebLogic Server instances. The publicly available PoCs bypass access using illegal characters and then execute comman...

10CVSS9.1AI score0.99997EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/14 4:52 p.m.8 views

CVE-2022-22947

Copied from Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

10CVSS7.8AI score0.98253EPSS
SaveExploits54References2
Kitploit
Kitploit
added 2026/09/14 4:39 p.m.6 views

msmap

MSMAP Msmap是一个内存马生成器,兼容多种容器、组件、编码器、 WebShell / Proxy / Killer 和管理客户端。English 背后的想法(一),背后的想法(二), 背后的想法(三) 功能 WIP Function 动态菜单 自动编译 生成脚本 精简模式 图形界面...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 4:27 p.m.3 views

CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell help root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/14 2:00 p.m.5 views

Next.js-Exploit-Tool

Next.js-Exploit-Tool Herramienta integral de explotación con interfaz gráfica para Next.js. Introducción Una herramienta independiente de evaluación de seguridad para CVE-2025-55182 , desarrollada en Go, que ofrece una interfaz gráfica GUI para realizar rápidamente detección y verificación de...

10CVSS7.5AI score0.99802EPSS
SaveExploits391
Kitploit
Kitploit
added 2026/09/14 1:26 p.m.3 views

CVE-2022-26134-Godzilla-MEMSHELL

CVE-2022-26134-Godzilla-MEMSHELL Usage root@kitploit: java -jar CVE-2022-26134.jar Godzilla Password Godzilla Key example java -jar CVE-2022-26134.jar pass key If the memory shell has been injected successfully but Godzilla cannot connect, please add the following protocol header in the request...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/09/14 1:19 p.m.8 views

CVE-2022-22947

Introduction Inject Godzilla memory shell via CVE-2022-22947. Since the tools I found didn't have proxy functionality, I built my own wheel. Usage root@kitploit: main -u http://127.0.0.1:8080 Using proxy root@kitploit: main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080 Reference...

10CVSS7.7AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/14 1:11 p.m.4 views

MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/14 12:22 p.m.5 views

CVE-2022-22947-

CVE-2022-22947 Spring Cloud Gateway Actuator API SpEL expression injection command execution(CVE-2022-22947) Inject Godzilla memory shell Default key pass base64 Note: the code does not clear the route part, please clear it yourself.. Test environment:...

10CVSS7.8AI score0.98253EPSS
SaveExploits54References2
Kitploit
Kitploit
added 2026/09/14 12:18 p.m.4 views

CVE-2023-22527-Godzilla-MEMSHELL

CVE-2023-22527-Godzilla-MEMSHELL Usage ps: The tested version is 8.5.1. Other versions should work, but they haven't been tested. root@kitploit: 内容参考北辰师傅之前的工具 java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url 哥斯拉密码 哥斯拉密钥 example java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar http://xxx...

10CVSS8.5AI score0.99984EPSS
SaveExploits34
Kitploit
Kitploit
added 2026/09/14 11:50 a.m.4 views

CVE-2023-22527-MEMSHELL

Descripción del proyecto Este proyecto hace referencia al proyecto del maestro Boogipop https://github.com/Boogipop/CVE-2023-22527-Godzilla-MEMSHELL , y sobre la base del proyecto original soporta: 1. Inyección de memoria shell de 冰蝎 2. Añadir funcionalidad de proxy HTTP, uso: -proxy...

10CVSS8.3AI score0.99984EPSS
SaveExploits34References2
Rows per page
Query Builder