Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
paint2die — Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit PoC | Kitploit
Tools/GitHubGitHub/lucaskatashi/paint2die
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHublucaskatashi/paint2die

paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit PoC

View Repository
18 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Website

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit

Installation • Usage • Running Paint2Die


Installation Instructions

root@kitploit:~
git clone https://github.com/LucasKatashi/paint2die.git
cd paint2die
chmod +x paint2die.py
pip install -r requirements.txt

Usage

root@kitploit:~
./paint2die -h

This will display help for the tool. Here are all the switches it supports.

root@kitploit:~
Usage:
 ./paint2die [flags]                                                                
 _____     _     _   ___ ____  _      
|  _  |___|_|___| |_|_  |    \|_|___ 
|   __| .'| |   |  _|  _|  |  | | -_|
|__|  |__,|_|_|_|_| |___|____/|_|___|
                    by: Lucas Katashi
usage: paint2die.py [-h] -t TARGET [-c COMMAND] [-r REVERSE] [-s]
paint2die.py: error: the following arguments are required: -t/--target

RichFaces CVE-2018-12533 RF-14310 exploit

options:
  -h, --help            show this help message and exit
  -t, --target TARGET   URL of RichFaces application, i.e:
                        http://example.com/app/a4j/g/3_3_3.Final
  -c, --command COMMAND
                        Command to execute
  -r, --reverse REVERSE
                        IP:PORT for reverse shell
  -s, --silence         Silence output

References

  • https://web.archive.org/web/20211118021323/https://www.lucifaer.com/2018/12/05/RF-14310%EF%BC%88CVE-2018-12533%EF%BC%89%E5%88%86%E6%9E%90/
Download Tool