hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

redpill

:octocat: 项目描述 redpill 项目旨在协助反向 TCP Shell 执行后渗透任务。在红队任务中，我们常常 需要使用非常规方式访问目标系统，例如反向 TCP Shell（ 非 Metasploit ），以便 绕过系统管理员部署的防御措施。在成功完成第一步之后， 我们面临另一种问题： “我已经获得目标系统的（Shell）访问权限，现在能做什么？” 该项目包含多个 PowerShell 脚本，用于执行不同的 后渗透 任务， 主脚本 redpill.ps1 的主要功能是下载/配置/执行本仓库中的脚本。 目标是让我们的反向 TCP Shell 提示符具有类似 meterprete...

GodGenesis

欢迎来到 God Genesis God Genesis 是一个完全使用 Python3 编写的 C2 服务器，旨在帮助红队成员和渗透测试人员。 目前它仅支持 TCP 反向 Shell，但稍等——它是 FUD（完全不可检测的），并且可以从任何目标 Windows 机器上获得管理员 Shell。 它所支持的命令列表如下： root@kitploit: =================================================================================================== 基础命令:...

cve-2018-9948-9958-exp

2018-9948-9958-exp "getshellcodefrommsf.py" 是一个 Python 脚本，用于从 msfvenom 获取 shellcode，然后将输出复制到 exp.pdf 以替换 'calc' shellcode 块，最后即可生效。哎呀，这是一个 tcp 反向 shellcode。 示例代码如下：python getshellcodefrommsf.py 192.168.1.79 1234...

EUVD-2018-19598

Malware in sbrugna...

[SECURITY] Fedora 40 Update: haproxy-2.9.10-1.fc40

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

Zyxel Firewall ZTP Unauthenticated Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Zyxel Firewall ZTP Unauthenticated Command Injection', 'Description' = %q This module exploits CVE-2022-30525, an unauthenticated remote command...

[SECURITY] Fedora 31 Update: haproxy-2.0.14-1.fc31

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

Important: Red Hat Security Advisory: rh-haproxy18-haproxy security update

An update for rh-haproxy18-haproxy is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Hershell - Simple TCP reverse shell written in Go

Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are great,...

Command injection

GSTNofflinetool in India Goods and Services Tax Network GSTN Offline Utility tool before 1.2 executes winstart-server.vbs from the "C:\GST Offline Tool" directory, which has insecure permissions. This allows local users to gain privileges by replacing winstart-server.vbs with arbitrary VBScript...

Dup Scout Enterprise 9.9.14 - Remote Buffer Overflow (SEH)

Dup Scout Enterprise 9.9.14 - Remote Buffer Overflow SEH !/usr/bin/env python Exploit Title: Dup Scout Enterprise v 9.9.14 Date: 2017-08-25 Exploit Author: Nipun Jaswal & Anurag Srivastava Author Homepage: www.pyramidcyber.com Vendor Homepage: http://www.dupscout.com Software Link:...

Exploit for Race Condition in Canonical Ubuntu_Linux

0xdeadbeef PoC for Dirty COW CVE-2...

Centreon 2.5.3 - Remote Command Execution

Exploit for php platform in category web applications Unauthenticated Remote Command Execution in Centreon Web Interface ================================================================== Description =========== Centreon is a popular monitoring solution. A critical vulnerability has been found in...

Linux/x86-64 - shell_reverse_tcp with Password Polymorphic Shellcode (1) (122 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Title: tcp reverse shell with password polymorphic version 122 bytes Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Copyright: c 2016 iQube. http://iQube....

Linux/x86-64 - TCP Reverse Shell with Password Prompt Shellcode (151 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Title: tcp reverse shell with password prompt in 151 bytes Author: Sathish kumar Contact: https://www.linkedin.com/in/sathish94 Copyright: c 2016 iQube. http://iQube.io Release...