CVE-2021-30128-EXP

CVE-2021-30128 Apache OFBiz Deserialization Vulnerability EXP Reference: https://mp.weixin.qq.com/s/Dr-jwiRr4NByjErjiXe1w...

webp-CVE-2023-4863

libwebp CVE-2023-4863 A Vulnerability to Hack The World - CVE-2023-4863 Finding The .webp Vulnerability in 8s Fuzzing with AFL++...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 POC exploit https://github.com/superzerosec/CVE-2022-29464 https://github.com/hakivvi/CVE-2022-29464 Based on it, the functions of detection and arbitrary file upload are added. Vulnerability author: superzerosec Original author: hakivvi Usage optional arguments: -h,...

log4shell_scanner

log4shellscanner Quick and dirty scanner, hitting common ports looking for Log4Shell CVE-2021-44228 vulnerability This utilizes wget, curl, nmap, and the Log4Shell Huntress LDAP endpoint: https://log4shell.huntress.com/ If you need to scan a private subnet that doesn't have internet access, you c...

CVE-2023-46604_ActiveMQ_RCE_Recurrence

Enter activemq/bin, select x64 or x32, and run activemq.bin with administrator privileges. Access admin at port 8161, admin/admin If it cannot be started, check whether the port is occupied and modify activemq.xml in conf. In my machine, the MQTT port was occupied, so I modified it. 2. Start an...

CVE-2022-1388-EXP

CVE-2022-1388-EXP This is CVE-2022-1388-EXP Author:Caps@BUGFOR Github:https://github.com/bytecaps Remaker:LinJacck Github:https://github.com/LinJacck Feature Display Verification mode: python CVE20221388.py -v -u targeturl Attack mode: python CVE20221388.py -a -u targeturl -c command Batch...

DirtyCow

DirtyCow - Exploit Below code takes advantage of a known vulnerability Dirty COW CVE-2016-5195 to escalate privileges and get root access. Before running, uncomment sc for your platform within main.c. Compilation: gcc main.c -o dirtycow -lpthread...

CVE-2019-14287

CVE-2019-14287...

CVE-2018-2628

CVE-2018-2628 CVE-2018-2628 Vulnerability Toolkit Vulnerability exploit tools compiled from Github include: 1.CVE-2018-2628 Vulnerability Detection Tool // POC for vulnerability existence detection 2.weblogicpoc.py // POC for exploit 3.ysoserial-0.1-cve-2018-2628-all.jar // Reference exploit tool...

Exploit-CVE-2023-22518

Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518: This vulnerability is described as “an improper authorization vulnerability in Confluence's database and server”. The issue affects On-premises versions of Atlassian products. Setup Environment Use the vulnerable version 8.0.4 UR...

JndiRemover

JndiRemover A small mod aimed at eliminating the CVE-2021-44228 vulnerability by removing/disabling Jndi in Log4j and intercepting messages containing the text "$jndi:ldap://domainname.com/script", which will be removed. Supported versions of MC: Forge 1.7.10, 1.12.2...

CVE-2024-20931-Poc

CVE-2024-20931-Poc...

pacemaker

Pacemaker OpenSSL の クライアント で Heartbleed CVE-2014-0160 の脆弱性を持つものを悪用しようとします。Python 2 および 3 に対応しています。 自分は脆弱か？ サーバーを起動します: root@kitploit: python pacemaker.py クライアント側で https://localhost:4433/ を開いてください 必要に応じてホスト名を置き換えてください。例: root@kitploit: curl https://localhost:4433/ クライアントは常に接続に失敗します: root@kitploit:...

sentryexploit

MobileIron Sentry CVE-2023-38035 信息提取 功能 提取公司名称和联系邮箱 漏洞验证 使用方法 root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Company: XXXX Ltd., contact: [email protected] 参考来源 Horizon3 深入分析...

Tool_Camera_Exploit_Netwave_CVE-2018-6479

ToolCameraExploitNetwaveCVE-2018-6479 Netwaveカメラにおけるサービス拒否脆弱性 CVE-2018-6479. CVE-2018-6479: https://vulners.com/cve/CVE-2018-6479 a. カメラへのアクセス: b. ツールを使用してデバイスのサービス拒否脆弱性を攻撃します: ツールにデバイスのIPを入力します。 c. 得られた結果: == 5〜7分間 デバイスにアクセスできなくなります。...

CVE-2023-33246

CVE-2023-33246 Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246 Exploit Usage: root@kitploit: java -jar CVE-2023-33246.jar -ip "127.0.0.1:10911" -cmd "open -a Calculator" Features of This Tool Since the heartbeat mechanism triggers the vulnerability every 30 seconds, the tool...

CVE-2024-37051-EXP

CVE-2024-37051-EXP CVE-2024-37051 poc and exploit See PR 1: https://github.com/LeadroyaL/CVE-2024-37051-EXP/pull/1 Chinese vulnerability analysis: https://leadroyal.cn/p/2403/...

Tool_Exploit_Password_Camera_CVE-2018-9995

ToolExploitPasswordCameraCVE-2018-9995 CVE-2018-9995: https://vulners.com/cve/CVE-2018-9995 1. Search for vulnerable devices on Google with the keyword: intitle:"DVR login". 2. Try to access any device: We see the device requires a Username and Password to access. 3. Check if we can retrieve the...

CVE-2021-28476-tools-env

pack test and exploitdev for POC CVE-2021-28476 from bluefrostsecurity researcher installation guide: root@kitploit: cd tools/ ./addtopathtools.sh addition tools for /usr/bin/ remove tools from /usr/bin: cd tools/ ./deltopathtools.sh tools: pocinit: description: preinit env guest host for compile...

Docx-Exploit-2021

Docx-Exploit-2021 This docx exploit uses res files inside Microsoft .docx file to execute malicious files. This exploit is related to CVE-2021-40444 If you can not reproduce Kindly message me on Telegram: LazarusRebor...