55 matches found
Zimbra-RCE
Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...
CVE-2025-34085-Multi-target
CVE-2025-34085 マルチターゲットRCEスキャナー CVE-2025-34085 の大量悪用スキャナー — WordPress Simple File List プラグインにおける未認証のリモートコード実行脆弱性。 このツールは、PHPペイロードを画像に偽装してアップロードし、脆弱なファイルエンジンを介してリネームし、カスタムコマンドでシェル実行をトリガーします。大規模なターゲットセットに対してマルチスレッドスキャンをサポートします。 🔥 機能 マルチターゲットスキャン targets.txt から 悪意のあるペイロードの自動アップロードとリネーム...
CVE-2014-6271
Hellshocker 0.1.1 Shellshock 취약점 익스플로잇 도구 약한 쉘쇼크 익스플로잇을 사용하거나 단순히 "/bin/bash & /dev/tcp/IP/port 0&1" 로 서버에 침투하는 것에 지치셨나요? 네, 더 복잡한 무언가를 서버에 업로드하고 실행해야 하는데, 대용량 파일을 base64로 인코딩하면 웹 서버가 HTTP 요청을 수락하지 못할 수도 있습니다. 이 도구를 사용하면 문제가 해결될 수 있습니다. 페이로드를 base64로 인코딩하여 기본값 128바이트 크기의 청크로 웹 서버에 보낸 후, 전송이 완료되면...
CVE-2018-7600-Drupal-0day-RCE
CVE-2018-7600-Drupal-0day-RCE Drupal 0day Remote PHP Code Execution Perl This is a 0day RCE Exploit in Drupal CMS You Can Upload Payload on server. CVE : CVE-2018-7600 Cxsecurity : https://cxsecurity.com/issue/WLB-2018040108 How Run Exploit : 1-git clone...
Zimbra-RCE
Zimbra-RCE Zimbra RCE CVE-2019-9670 root@kitploit: $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670...
CVE-2025-54769
CVE-2025-54769 – LPAR2RRD RCE 설명 : 이 저장소는 lpar2rrd에서 발견된 취약점인 CVE-2025-54769에 대한 PoCProof‑of‑Concept 익스플로잇을 포함합니다. 해당 취약점은 /lpar2rrd-cgi/upgrade.sh 엔드포인트를 악용하여 원격 코드 실행RCE 및 디렉터리 트래버설을 허용합니다. 익스플로잇 작업 흐름은 다음과 같습니다: 스크립트 생성 : 악의적인 Perl CGI 페이로드users.pl를 자동으로 생성하여 임의의 셸 명령을 실행합니다기본값: whoami. 페이로드 업...
SMB to Meterpreter Upgrade via PsExec
Upgrades an authenticated SMB session to a Meterpreter session using PsExec techniques. This module uploads a service-wrapped executable payload to the ADMIN$ share via the existing authenticated SMB connection, then creates and starts a Windows service that executes the payload. This mirrors the...
HTTP Fetch, Windows Upload/Execute, Hidden Bind TCP Stager
Fetch and execute an x86 payload from an HTTP server. Uploads an executable and runs it staged. Listen for a connection from a hidden port and spawn a command shell to the allowed host. Module Options msf use payload/cmd/windows/http/x86/upexec/bindhiddentcp msf payloadbindhiddentcp show actions...
📄 Novell GroupWise 2012 Traversal / Shell Upload
This code exploits the directory traversal vulnerability in Novell GroupWise 2012 before Support Pack 1 to steal files, and attempts to upload a web shell payload if possible, making it an effective penetration testing tool...
📄 Magento 2 / Adobe Commerce 2.4.x SessionReaper
This PHP script is a proof of concept exploit targeting Magento for CVE‑2025‑54236, commonly referred to as SessionReaper. It is a PHP port of an original Metasploit module and is designed for security testing...
CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...
CVE-2025-41717
An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation 'Code...
CVE-2023-53942 File Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Execution
File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious PHP zip archives to the web server. Attackers can create a custom PHP payload, upload and unzip it, and then execute arbitrary system commands through a crafted PHP script with ...
Exploit for Improper Neutralization of Line Delimiters in Cacti
Cacti CVE-2025-24367 Authenticated RCE PoC This repository co...
Exploit for Code Injection in Samba
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494...
EUVD-2012-6608
Malware in sbrugna...
Windows Silent Process Exit Persistence
Windows allows you to set up a debug process when a process exits. This module uploads a payload and declares that it is the debug process to launch when a specified process exits. Module Options msf use exploit/windows/persistence/imageexecoptions msf exploitimageexecoptions show targets...
📄 Windows Silent Process Exit Persistence
Windows allows you to set up a debug process when a process exits. This Metasploit module uploads a payload and declares that it is the debug process to launch when a specified process exits. This module requires Metasploit: https://metasploit.com/download Current source:...