32366 matches found
CVE-2018-7600-Drupal7
CVE-2018-7600-Drupal7 CVE-2018-7600【Drupal7】批量扫描工具。 root@kitploit: 主文件:CVE-2018-7600-Drupal7.py 其实本质是封装了whoami的exp Drupal7/8的原理是一样的但该脚本当是只做了7的适配 提供target.txt作为目标输入,结果自动输出到result.txt文件 因为是好久前写的脚本现在分享一下,有不够精致的地方还请多多包涵 Demo: root@kitploit: 为了防止你们说我水,顺便丢一个单目标的EXP 本脚本仅用于授权测试,请勿用于非法用途,请遵守游戏规则。...
CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass
CVE-2025-0411-7-Zip-Mark-of-the-Web-绕过 此仓库是关于 CVE-2025-0411 7-Zip Mark-of-the-Web 绕过漏洞的。...
CVE-2018-7600
Drupal 7(CVE-2018-7600 / SA-CORE-2018-002) 使用以下命令安装所需库: root@kitploit: pip install requests pip install bs4 root@kitploit: $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTION CVE-2018-7600 | | b...
cilium
.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...
Cobaltstrike-MS17-010
Cobaltstrike Aggressor Script Herramienta de explotación y escáner para ms17-010. 1. Descarga los archivos en la carpeta raíz de cobaltstrike. 2. Importa "aggressor.cna" Las herramientas de explotación ms17-010 solo son compatibles con win7 x64 y win2008 r2 pwn/Invoke-EternalBlue.ps1 de Empire...
DefCon25
实验室设置 1. 2 台虚拟机 = Win7 x64 和 Win10RS1/2 x64 2. 将 "DefCon-Tool.zip" 解压到 C 盘根目录 3. 遵循幻灯片和 Lab-Writeup.txt...
fileintel
fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...
Exploit-CVE-2014-4113
Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...
CVE-2026-5364
CVE-2026-5364 CVE-2026-5364 是一个 CVSS 8.1(高危)未认证任意文件上传漏洞,存在于 Drag and Drop File Upload for Contact Form 7 插件中。 CVE-2026-5364 — CF7 拖放文件上传 RCE 通过sanitizefilename 绕过实现未认证任意文件上传 CVSS 8.1(高危) | 受影响:= 1.1.3 | 已修复:1.1.4 📋 概述 字段| 值 ---|--- CVE ID| CVE-2026-5364 插件| Drag and Drop File Upload for Contact...
cve-2018-8120-exp
CVE-2018-8120 漏洞利用工具 针对 CVE-2018-8120 的漏洞利用 学习自: https://xiaodaozhi.com/exploit/156.html https://github.com/unamer/CVE-2018-8120 在 Win7 SP1 x86 和 x64 上测试...
CVE-2016-0051
针对我的 CVE-2016-0051 MS-016 的概念验证 BSoD(蓝屏死机)和权限提升(到 SYSTEM)代码。 漏洞 PoC 作者: koczkatamas https://twitter.com/koczkatamas 原始代码: https://github.com/koczkatamas/CVE-2016-0051 感谢 koczkatamas 此 PoC 将从 CMD 运行,并且 shell 会在同一个 CMD 中生成 -pid- 更多信息请参考上面的链接 此仓库包含 Windows 7 PoC 的源代码,同时也有已编译版本,如果你遇到问题可以直接使用 将 EoP.ex...
CVE-2018-7600-Drupal-RCE
CVE-2018-7600 Drupal远程代码执行 感谢以下贡献者: 文件| Drupal版本| 来源| 备注 ---|---|---|--- poc0-curl.sh| 8| https://twitter.com/ibo0om/status/984674893768921089 https://twitter.com/IamSecurity/status/984977193565646848 https://gist.github.com/g0tmi1k/7476eec3f32278adc07039c3e5473708| poc1-a2u.py| 8|...
CVE-2006-3592
CVE-2006-3952 Exploit para Easy File Sharing FTP Server 3.5 en Win7 32 Basado en: pwntools msfvenom / reversetcp payload Aplicación vulnerable disponible en https://www.exploit-db.com/apps/0efddb6d04f4125d7c1f104c6b1c60a0-efsfs.exe Sobrescritura simple de SEH + un par de saltos hacia atrás, debid...
OgnlContentTypeRejectorValve
OgnlContentTypeRejectorValva Esta es una Valve para Tomcat7 que bloquea la vulnerabilidad de ejecución remota de código de Struts 2 CVE-2017-5638...
cve-2018-8120
CVE-2018-8120 win7 x64 参考 https://github.com/unamer/CVE-2018-8120 https://github.com/FuzzySecurity/PSKernel-Primitives...
Kubernetes-1.12.3-all-auto-install
Kubernetes-1.12.3-all-auto-install 项目介绍 个人整理的Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 无 CVE-2018-1002105 漏洞的master,node节点全自动快速一键安装部署文件,适用于测试环境,生产环境的快速安装部署 参考文档 https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/ master节点安装准备工作 1. 配置好centos的网络环境,使其可连接互联网,用于下载安装文件 2...
npcap
Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...
CVE-2025-11001---7-Zip
CVE-2025-11001 - 7-Zip Recorrido de enlaces simbólicos de alta gravedad en 7-Zip que permite escritura arbitraria de archivos / RCE Corregido en 7-Zip 25.00 julio de 2025 – Exploit público disponible SOLO PARA PRUEBAS DE SEGURIDAD E INVESTIGACIÓN AUTORIZADAS -critical Resumen de la vulnerabilidad...
bitcracker
BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...