Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Ofbiz-RCE — CVE-2024-32113 & CVE-2024-38856 | Kitploit
Tools/GitHubGitHub/guinea-offensive-security/ofbiz-rce
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlRemote Access Tool
GitHubguinea-offensive-security/ofbiz-rce

Ofbiz-RCE

CVE-2024-32113 & CVE-2024-38856

View Repository
401 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

📌 Apache OFBiz RCE Exploit (CVE-2024-38856)

This Python script allows exploiting a Remote Code Execution (RCE) vulnerability in Apache OFBiz (versions < 18.12.15) through unauthorized access to the endpoint /webtools/control/forgotPassword/ProgramExport.

🛠️ Description

  • CVE : CVE-2024-38856
  • Type : Incorrect Authorization → Remote Code Execution
  • Component : Apache OFBiz
  • Affected versions : before 18.12.15
  • Exploit : Groovy code injection converted to Unicode (\uXXXX) sent via POST.

🚀 Features

  • Remote Linux command execution (--cmd)
  • Reverse shell via busybox/nc (--shell)
Download Tool
  • Proxy support
  • Colored output and intelligent response parsing

    • ⚙️ Usage

    1. Simple command execution

    root@kitploit:~
    python3 cve-2024-38856_Scanner.py -u https://TARGET:8443 -c "id"