Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-57517-CWP — Control Web Panel (CWP) vulnerability scenario related to CVE-2026-57517 | Kitploit
Tools/GitHubGitHub/gagaltotal/cve-2026-57517-cwp
Vulnerability ScannersExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubgagaltotal/cve-2026-57517-cwp

CVE-2026-57517-CWP

Control Web Panel (CWP) vulnerability scenario related to CVE-2026-57517

View Repository
32 months agoNot yet reviewed
Website

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-57517 CWP Exploit

This repository contains a Go-based proof-of-concept tool for testing a known Control Web Panel (CWP) vulnerability scenario related to CVE-2026-57517. The implementation targets a blind SQL injection path and includes optional webshell deployment and command execution flow for authorized security assessment purposes.

Overview

The project is designed to help security researchers and authorized testers:

  • detect potential CWP exposure
  • test a vulnerable target host in a controlled environment
  • deploy a temporary webshell when the condition is present
  • execute commands and collect output
  • generate live text reports and JSON reports

Project Structure

  • exploit_cwp.go - main Go implementation
  • go.mod - module definition and Go version
  • README.md - project documentation

Requirements

  • Go 1.22 or newer
  • Network access to the target host
  • A valid authorization to test the target system

Building the Project

From the repository root, run:

root@kitploit:~
git clone https://github.com/gagaltotal/CVE-2026-57517-CWP
go mod init CVE-2026-57517-CWP
go mod tidy
go build -o exploit_cwp .

This will produce an executable binary named exploit_cwp.

Usage

Screen Capture

Single Target

root@kitploit:~
./exploit_cwp -t target.example.com

Multiple Targets from a File

root@kitploit:~
./exploit_cwp -f targets.txt -o live.txt --json report.json

Interactive Shell Mode

root@kitploit:~
./exploit_cwp -t target.example.com --rce -u cwpsvc

Common Options

  • -t : single target host or IP address
  • -f : file containing targets, one per line
  • -u : known username to use instead of auto enumeration
  • -threads : number of concurrent workers
  • -timeout : HTTP timeout in seconds
  • -no-cleanup : leave the shell deployed on the target
  • -rce : enable interactive shell mode
  • -shell-url : use an existing shell URL directly
  • -v : enable verbose output
  • -o : path for the live text report
  • --json : path for the JSON report

Output Files

The tool can generate:

  • a live text report for quick review
  • a structured JSON report for automation or later analysis

Security Notice

This tool is intended solely for authorized security testing and research. Use it only on systems you are explicitly permitted to assess. The maintainers do not endorse or support unauthorized access or any unlawful activity.

Disclaimer

The code in this repository is provided for educational and defensive security purposes. Misuse of this software may violate applicable laws and regulations.

Download Tool