Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

Categories

View all categories

Loading categories

CVE-2023-33253 — Proof-of-concept exploit for CVE-2023-33253, enabling authenticated remote code execution in LabCollector 6.0-6.15 via malicious PHP file upload. | Kitploit

Tools/

GitHub/toxich4/cve-2023-33253

Vulnerability Analysis Exploitation Web Application Exploitation Penetration Testing Remote Access Tool

toxich4/cve-2023-33253

CVE-2023-33253

Proof-of-concept exploit for CVE-2023-33253, enabling authenticated remote code execution in LabCollector 6.0-6.15 via malicious PHP file upload.

View Repository

4133 years ago

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

CVE-2023-33253

LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file (such as shell.jpg.php.shell) being sent. Tested on Windows Server 2019 x64

How to use:

python CVE-2023-33253 -t 127.0.0.1 -u user -p user

PoC: Image alt

Download Tool