Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2019-18935-bypasswaf — Exploit for CVE-2019-18935 (Telerik UI) with WAF bypass via encrypted cookie payload injection and custom memory shell deployment. | Kitploit
Tools/GitHubGitHub/ekkoo-z/cve-2019-18935-bypasswaf
Vulnerability AnalysisExploitationWeb Application ExploitationWAF BypassPenetration TestingPayload Development
GitHubekkoo-z/cve-2019-18935-bypasswaf

CVE-2019-18935-bypasswaf

Exploit for CVE-2019-18935 (Telerik UI) with WAF bypass via encrypted cookie payload injection and custom memory shell deployment.

View Repository
8141 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2019-18935-bypasswaf

Modified from the original project: https://github.com/noperator/CVE-2019-18935

  1. The attack malicious payload is passed from the cookie
  2. Metadata data is passed in through an encrypted interface and deserialized
  3. Default proxy 127.0.0.1:8080
  4. Default attack payload is Godzilla memory shell, password: pass, key: AES_base64 encryptor
    If you want to use your own memory shell logic, you can refer to this project:
    https://github.com/dust-life/CVE-2019-18935-memShell

Usage command: python CVE-2019-18935.py -v xxxx -u https://xxxxxx/Telerik.Web.UI.WebResource.axd -f c:\users\public -p gmemShell.dll

The image below generally indicates successful exploitation
Image

Download Tool