Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-26035 — Proof-of-concept exploit for CVE-2023-26035, a remote code execution vulnerability in ZoneMinder versions prior to 1.36.33 and 1.37.33. Supports custom command execution and reverse shell generation. | Kitploit
Tools/GitHubGitHub/heapbytes/cve-2023-26035
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access ToolArchived
GitHubheapbytes/cve-2023-26035

CVE-2023-26035

Proof-of-concept exploit for CVE-2023-26035, a remote code execution vulnerability in ZoneMinder versions prior to 1.36.33 and 1.37.33. Supports custom command execution and reverse shell generation.

View Repository
722 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

POC for CVE-2023-26035

Works for ZoneMinder (Versions prior to 1.36.33 and 1.37.33)

  • Vulnerability : Remote Code Execution (RCE)

Usage

root@kitploit:~
└─➜ python3 poc.py -h
usage: poc.py [-h] --target TARGET --cmd CMD
poc.py: error: the following arguments are required: --target, --cmd

Curl

  • Before jumping to rev shell, try this first, if you get hit, the service is vulnerable

curl

Reverse Shell

revshell

References :

https://nvd.nist.gov/vuln/detail/CVE-2023-26035
https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/unix/webapp/zoneminder_snapshots.rb

NOTE

This script is just an alternate version for metasploit-framework script.

Download Tool