Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

CVE-2021-22005 — VMware vCenter Server任意文件上传漏洞 / Code By:Jun_sheng | Kitploit

GitHub/jun-5heng/cve-2021-22005

Payload Generation Vulnerability Analysis Exploitation Web Application Exploitation Penetration Testing

jun-5heng/cve-2021-22005

CVE-2021-22005

VMware vCenter Server任意文件上传漏洞 / Code By:Jun_sheng

View Repository

2154 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

CVE-2021-22005

VMware vCenter Server Arbitrary File Upload Vulnerability

Code By: Jun_sheng @Orange Network Security Lab

Orange Network Security Lab https://0range.team/

0x00 Risk Overview

This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited.

Read online 《Cybersecurity Law of the People's Republic of China》

0x01 Usage

python cve-2021-22005.py -h for help

0x02 Bug Issues

Please submit bugs via Issues. I will check them when I have time.

0x03 Known Bugs

All steps fail when using a proxy during exploitation.

0x04 Version History

v0.2 Update

Updated the initial default webshell to a JSP webshell that can be connected with Behinder (冰蝎) by the tool, and added the ability to upload custom webshells. Thanks to @Tas9er for providing the webshell. Additionally, the built-in bash_shell-like functionality has been removed.