zoneminder-1.29-1.30-rce-exploit

ZoneMinder 1.29/1.30 SQLi to RCE Exploit A ready-to-run Python exploit for ZoneMinder 1.29/1.30 that chains the unauthenticated SQL injection CVE-2016-10204 , EDB-41239 all the way to an interactive reverse shell. This is a weaponized/automated PoC for a known, patched CVE, not a new exploit. EDB...

SpringFramework_CVE-2022-22965_RCE

SpringFrameworkCVE-2022-22965RCE SpringFramework Remote Code Execution Vulnerability CVE-2022-22965 Vulnerability Reproduction Environment docker pull vulfocus/spring-core-rce-2022-03-29 docker run -d -p 8090:8080 --name springrce -it vulfocus/spring-core-rce-2022-03-29 Write webshell Note: The...

SecAssignment

CVE-2020-7246 qdPM 9.1 For educational purposes only. See Reference for the details. Run $ git clone https://github.com/arafatansari/SecAssignment.git $ cd SecAssignment $ docker build -t cve-assignment:ine . $ docker run -it -p 80:80 cve-assignment:ine $ service apache2 start | service mysql sta...

CVE-2017-12617

updated version of https://github.com/cyberheartmi9 CVE-2017-12617 CVE-2017-12617 critical Remote Code Execution RCE vulnerability discovered in Apache Tomcat affect systems with HTTP PUTs enabled via setting the "read-only" initialization parameter of the Default servlet to "false" are affected...

slopShell

slopShell php webshell Since I derped, and forgot to talk about usage. Here goes. For this shell to work, you need 2 things, a victim that allows php file uploadyourself, in an educational environment and a way to send http requests to this webshell the client script is the 100% best way to...

spring-core-rce

spring-core-rce spring core rce simple exploitation A war file is available at https://github.com/fengguangbin/spring-rce-war For Docker environment, you can use https://github.com/lunasec-io/Spring4Shell-POC You can also use the online environment at http://vulfocus.io/ or the vulhub vulnerable...

spring-core-rce

CVE-2022-22965: Spring-Core-Rce EXP Features: 1. Vulnerability detection does not write a webshell, simple string output 2. Custom webshell file name and path 3. Does not append to the same file; each detection writes to a different webshell file name 4. Supports writing Behinder webshell 5. Prox...

Expoitation-de-la-vuln-rabilit-CVE-2022-22965

Exploitation of vulnerability CVE-2022-22965 The vulnerability CVE-2022-22965, known as Spring4Shell, is a remote code execution RCE flaw in the Java Spring Core framework, present in versions prior to 5.3.18 and 5.2.20. This vulnerability allows an attacker to inject and execute code remotely on...

watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452

watchTowr-vs-Citrix-Netscaler-PreAuth-RCE Detection Artifact Generator for Citrix NetScaler CVE-2026-8452 See our blog post for technical details. Detection in Action python3 watchTowr-vs-Citrix-Netscaler-PreAuth-RCE.py --target https://172.16.5.12:9443/ / | | |\ \ \ / / \ \ / | | | | / \ / /...

OSCP

OSCP OSCP Study Guide Table of Contents Enumeration and Recon Web Enumeration Nikto scanning: nikto -h http://10.10.10.1 Directory busting with different tools: DIRB dirb http://10.10.10.1 Gobuster gobuster dir -u http://10.129.155.74:3000 -w...

mimicry

Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...

ProxyLogon

ProxyLogon Original PoC: https://github.com/testanull How to use: python proxylogon.py Example: python proxylogon.py primary [email protected] If successful you will be dropped into a webshell. exit or quit to escape from the webshell or ctrl+c By default, it will create a file test.aspx. Th...

CVE-2020-24186

chmod +x CVE-2020-24186 ./CVE-2020-24186...

cve-2020-0688-webshell-upload-technique

Exchange Remote Code Execution cve-2020-0688 - RED TEAM MODE ON require: python3+ UNIVERSAL Python implementation for cve-2020-0688, utilizing ASPX webshell for custom command output This just a POC to facilitate vulnerability demostrations for security reasons. I disapprove every illegal actions...

cve-2022-29464

cve-2022-29464 Disclaimer 脚本仅供学习参考，请勿恶意攻击他人网站 如违法乱纪，造成一切后果由使用者自行承担 技术无罪，与作者无关 使用脚本默认同意以上说明！ --Author:lowkey0808 Usage usage: python3 -u url cve-2022-29464 optional arguments: -h, --help show this help message and exit -u 目标url -s 上传的木马,默认上传内置shell.jsp Direct command execution available Webshell...

CVE-2023-4220

Chamilo CVE-2023-4220 Exploit The CVE-2023-4220 vulnerability is a file upload vulnerability affecting Chamilo versions = 1.11.24. This vulnerability allows an attacker to achieve remote command execution by uploading a webshell via the path /main/inc/lib/javascript/bigupload/inc/bigUpload.php,...

ProxyLogon

ProxyLogon For Python3 ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists user's mail. --mail...

nano

nano Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient. Put it on watch maybe, I will continue to upload more webshells in here. Nano ?=$GETp==&&$GETf; Features 35 bytes in size Can't be detected by static code scanners Supports authentication Usage...

CVE-2022-22965-PoC

CVE-2022-22965 PoC Minimal example of how to reproduce CVE-2022-22965 Spring RCE. Run using docker compose 1. Build the application using Docker compose docker-compose up --build 2. To test the app browse to http://localhost:8080/handling-form-submission-complete/greeting 3. Run the exploit...

Shiro_Xray

ShiroXray Gadget CommonsBeanutils1 CommonsCollectionsK1 CommonsCollectionsK2 Getshell with Ice Scorpion import com.sun.org.apache.xalan.internal.xsltc.runtime.AbstractTranslet; import java.io.PrintWriter; import java.net.URLDecoder; import sun.misc.BASE64Decoder; public class 10837093162496 exten...