121634 matches found
CVE-2018-15473-User-Enumeration-
CVE-2018-15473 – SSH Username Enumeration A Python tool developed by me to identify valid SSH usernames by exploiting CVE-2018-15473. Target Information Service: SSH Version: OpenSSH 5.8p1 Debian 1ubuntu3 Operating System: Ubuntu Linux Protocol: SSH-2.0 Assessment: Tested for CVE-2018-15473 SSH...
CVE-2022-24834-
CVE-2022-24834 python exploit.py -url -port...
google-osconfig-privesc
Summary The googleosconfigagent process is a component GoogleCloudPlatform https://github.com/GoogleCloudPlatform/osconfig tooling, running on each VM by default. The agent is running as root and responsible for some user-controllable services, including OS config...
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution
Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...
php-8.1.0-dev-backdoor-rce
PHP 8.1.0-dev Backdoor Remote Code Execution PHP 8.1.0-dev Backdoor System Shell Script PHP verion 8.1.0-dev was released with a backdoor on March 28th 2021, but the backdoor was quickly discovered and removed. If this version of PHP runs on a server, an attacker can execute arbitrary code by...
Zeek-Endpoint-Enrichment-conn
Zeek-Endpoint-Enrichment-conn Enrich the conn.log with EDR data For detailed documentation, see https://docs.corelight.com...
icannTLD
icannTLD Corelight-update can now be used to create and maintain the icannTLD input files. Script Description Zeek script using the official ICANN Top-Level Domain TLD list with the Input Framework to extract the relevant information from a DNS query and mark whether it's trusted or not. The sour...
top-dns
Top DNS Measurement Overview This script uses a built in probabalistic measurement mechanism in Bro to measure the top DNS requests by type of query, i.e., CNAME, A, AAAA, etc being done over a definable period of time. This is logged into a new log named "topdns.log". By using the probabalistic...
SleuthQL
SleuthQL Description SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers into each parameter where the SQL-esque variables were identified. Supported Request Types SleuthQL requires an export of...
bro-shellshock
ShellShock Detector for Bro This script detects successful exploitation of the Bash vulnerability with CVE-2014-6271 nicknamed "ShellShock". It's more comprehensive than most of the detections around in that it's watching for behavior from the attacked host that might indicate successful compromi...
gitbook-xss
gitbook-xss CVE-2019-19596 GitBook through 2.6.9 allows XSS via a local .md file By entering script in MD file, it can be executed by gitbook...
Mongodb-Redis-scan
Mongodb-Redis-scan Script de escaneo anónimo de mongodb-redis, compatible con el escaneo anónimo de mongodb y redis Script de escaneo anónimo de mongodb-redis, compatible con el escaneo anónimo de mongodb y redis; fue escrito anteriormente por una necesidad puntual y ahora lo comparto con todos...
Metinfo-6.1.2-SQL-injection
Metinfo-6.1.2-SQL-injection Metinfo 6.1.2 SQL injection script 0-sec.org...
Cobaltstrike-MS17-010
Cobaltstrike Aggressor Script ms17-010 exploit tool and scanner. 1. Download files in cobaltstrike's root folder. 2. Import "aggressor.cna" ms17-010 exploit tools just support win7 x64 and win2008 r2 pwn/Invoke-EternalBlue.ps1 from Empire getinfo/Invoke-EternalScan.ps1 from @vletoux...
CVE-2011-1473-POC
CVE-2011-1473-POC CVE-2011-1473 POC script USAGE python3 poc-CVE-2011-1473.py --target TARGETHOST --count 5 --debug...
git-dump
git-dump This script is a tool to recursively download the contents of the '.git' directory from a website. Using Python and libraries like 'requests' and 'BeautifulSoup', this script examines the directory structure, downloads files, and identifies SHA-1 hashes within Git files. Feature...
autonmap
autonmap I use this script for HTB Nmap Scan :...
yealink_tools
Yealink firmware reverse engineering This repository contains some script utilities used during the reverse engineering of Yealink VOIP phones firmware. For more information about this research, please read the blogpost...
smb-usermap
Samba "username map script" Command Execution This module exploits a command execution vulnerability in Samba versions 3.0.20 through 3.0.25rc3 when using the non-default "username map script" configuration option. By specifying a username containing shell meta characters, attackers can execute...