CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload...

CVE-2024-50379

CVE-2024-50379 Prueba de Concepto PoC Este repositorio contiene un script de prueba de concepto PoC para explotar CVE-2024-50379 , una vulnerabilidad en Apache Tomcat. La vulnerabilidad es una condición de carrera de Tiempo de Verificación Tiempo de Uso TOCTOU que puede provocar la ejecución remo...

spip-cve-2023-27372-rce

Exploit de RCE no autenticada CVE-2023-27372 en SPIP Subida de Web Shell Este script de Python explota CVE-2023-27372, una vulnerabilidad de ejecución remota de código no autenticada en SPIP CMS versiones anteriores a 4.2.1. Aprovecha una falla de envenenamiento de caché en el mecanismo de...

pwnacle-fusion

pwnacle-fusion Automated exploit for Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Credits to @misssudo for the disclosure Usage: ./pwnacle.rb targeturl payloadurl This exploit uses both CVEs to upload a .jsp shell from your payloadurl which is then reachable from /reports/images/shell.jsp...

CVE-2015-6967

CVE-2015-6967 An exploit for the Nibbles manager version 4.0.3. This exploit allows RCE to be performed. Requirements optparse, signal, requests Usage root@kitploit: python3 CVE-2015-6967.py --url http://10.129.156.150/ --username admin --password nibbles + Login Succesfuly! + Uploading shell...

CVE-2024-44871

MoziloCMS = 3.0.1 Authenticated RCE Description This script is an exploit tool designed for testing web applications running MoziloCMS. It allows an attacker to use admin logins to upload a PHP web shell via jpg file, rename the uploaded file to php, and send system commands to the target through...

CVE-2024-6132

CVE-2024-6132 Pexels: Fotos de stock gratuitas = 1.2.2 - Carga arbitraria de archivos autenticada Contribuidor+ Uso root@kitploit: usage: CVE-2024-6132.py -h -u URL -un USERNAME -p PASSWORD -shellurl SHELLURL Pexels: Free Stock Photos = 1.2.2 - Authenticated Contributor+ Arbitrary File Upload | B...

CVE-2023-50564

CVE-2023-50564 For educational purposes only. This script abuses CVE-2023-50564 to upload a reverse-php shell to the target server. You can use a shell like this one. Just zip the php file and pass the zip to this script. Example root@kitploit: python3 cve-2023-50564.py -u http://idonot.exist -f...

CVE-2022-31814

CVE-2022-31814 Exploit actualizado - pfBlockerNG = 2.1.426 Unauth RCE CVE-2022-31814 Descripción Este script es un exploit de prueba de concepto para pfBlockerNG = 2.1.426 que permite la ejecución remota de código. Toma una URL objetivo única o una lista de URLs, intenta subir un shell usando...

CVE-2017-12617

Getting started The purpose of this Proof Of Concept is to demonstrate how it is possible to use the CVE-2017-12617 in order to have a remote control on an Apache Tomcat server. Instructions 1. Please execute this command to run the server. make serverup 2. Execute this command to run the attack...

exploits

Exploits Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes. Current Exploits index may be out of date phpMoAdmin Remote Code Execution CVE-2015-2208 LotusCMS Remote Code Execution OSVDB-75095 ElasticSearch Remote Code Execution CVE-2015-1427 ShellShock...

CVE-2022-31814

Download CVE-2022-31814 This script exploits a vulnerability in pfSense to upload a shell, execute a command, and then delete the shell. Requirements Python 3.x requests library Installation 1. Clone the repository or download the script. 2. Install the required Python libraries: root@kitploit: p...

wp-file-manager

wp-file-manager WP File Manager 6.9 - Arbitrary File Upload leading to RCE root@kitploit: usage: wp-file-manager.py -h -u URL -f FILE optional arguments: -h, --help show this help message and exit -u URL, --url URL URL of host to check will need http or https -f FILE, --file FILE File of URLS to...

PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit PanaceaSoft all products 0day exploit https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html no write-up read: jQuery File Upload's PHP Upload Handler...

Kintol_Shell_Upload

KintolShellUpload python 2.7...

rocket-lms-shell-upload-auto-register

rocket-lms-shell-upload-auto-register Vulnerabilidad de subida de shell en Rocket LMS Python 2.7 Compra un café : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC ¿Cómo usar? Instala Python 2.7 Descargar aquí python file.py ¿Fuente?...

CVE-2026-0740

ninja.py An experimental/tool script that uses file upload endpoints for the Ninja Forms plugin on WordPress sites. It sends requests sequentially to targets in list.txt and writes successful uploads to the shell.txt file. Requirements Python 3 requests usually installed together with urllib3...

CVE-2024-9290

CVE-2024-9290 Exploit Tool | Super Backup & Clone Vulnerability The tool targets WordPress websites that use the Super Backup & Clone plugin and are vulnerable to arbitrary file upload. It attempts to upload a malicious shell into the /wp-content/uploads/isnapshots/ directory. Once uploaded, the...

CVE-2022-31814

CVE-2022-31814 Exploit actualizado - pfBlockerNG = 2.1.426 RCE sin autenticación CVE-2022-31814 Descripción Este script es un exploit de prueba de concepto para pfBlockerNG = 2.1.426 que permite la ejecución remota de código. Toma una sola URL objetivo o una lista de URLs, intenta subir un shell...

CVE-2019-9978

Social Warfare 插件 WordPress 3.5.2 远程代码执行 WordPress Social Warfare 远程代码执行（自动上传 Shell） 日期：2019年3月 下载链接：https://wordpress.org/plugins/social-warfare/ 参考：https://wpvulndb.com/vulnerabilities/9259 版本： CVE：2019-9978 用法： python script.py list-of-sites.txt...