docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh ./scripts/deploy.sh to close the...

CVE-2024-24919

CVE-2024-24919 Checker A simple bash script to check for the vulnerability CVE-2024-24919. Installation Clone the repository: git clone https://github.com/am-eid/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919 Usage ./CVE-2024-24919 -l ips.txt...

CVE-2024-40453

CVE-2024-40453 - Squirrelly v9.0.0 RCE Disclaimer: This script is for educational use only. Do not use it for illegal purposes. If you do, it’s entirely your responsibility; I am not liable for any misuse. Description This script creates a reverse shell called payload.sh in the current directory...

CVE-2024-6387_Check

This script checks if servers are running a vulnerable version of OpenSSH based on specified targets. It uses threading for concurrent scanning of multiple targets and ports. Installation: git clone https://github.com/sardine-web/CVE-2024-6387Check.git cd CVE-2024-6387Check Usage To check if...

Heartbleed

Heartbleed-POC This repository aims to serve as a valid proof-of-concept for the Heartbleed CVE, as well as contain instructions for setting up your own Heartbleed challenge without using a pre-built Dockerfile. How to build the lab 1. Navigate to the source/service directory using cd...

CVE-2021-21239

CVE-2021-21239 This is a poc script to explot the xmlsec vulnerability CVE-2021-21239 To use this script you can either build the docker image or you can provide an rsa key yourself and run it assuming you have xmlsec installed Vulnerability info:...

CVE-2023-43876-October-CMS-Reflected-XSS---Installation

October CMS Reflected XSS v3.4.16 Author: Sergio Description: Cross-Site Scripting XSS vulnerabilitiy in installation of October v.3.4.16 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost field. Attack Vectors: A vulnerability in the...

CVE-2024-4367

CVE-2024-4367 POC Usage python poc.py mal.pdf "alert'0xr2r'" References CVE-2024-4367: Arbitrary JS Execution in PDF.js PDF.js POC scaner templates...

CVE-2024-29296-PoC

Portainer CVE-2024-29296 Proof of Concept Script Requirements python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Usage python3 main.py Enter Target URL: Enter Username List: Credits Reported by: https://github.com/ThaySolis/CVE-2024-29296...

CVE-2024-23113

CVE-2024-23113 This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE. How To Use 1. Create a "clients.txt" file, and import a list of all your clients IP addresses. 2. Create a "vul.txt" file. This will be used to export the scripts findings. 3. Run...

Detect-CVE-2018-20250

Detect-CVE-2018-20250 This script detects whether a .rar file may have the configuration to exploit CVE-2018-20250. For this detection, the file command and the strings command, which are available in most Linux distributions, are used. Usage ./detectwinrarexploit.sh Payload extraction To extract...

CVE-2021-41773-Scanner

CVE-2021-41773 Shodan scanner CVE-2021-41773 Shodan scanner via multithread Python script Usage: git clone https://github.com/anldori/CVE-2021-41773-Scanner cd CVE-2021-41773-Scanner/ Add your private Shodan API to scan.py python3 scan.py...

Mass-CVE-2021-3129-Scanner

Mass Scanner for CVE-2021-3129 Laravel Debug RCE Usage $ bash massCVE-2021-3129scan.sh list.txt...

CVE-2007-2447

CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : netcat -lnvp Table of contents Exemples Requirements Payloads Examples py...

CVE-2024-23334

CVE-2024-23334 !IMPORTANT Keep in mind that sometimes aiohttp may be configured in another folder and not in the static one, if that is the case change the value of the folder variable in the script. How To Use Exploit !CAUTION Disclaimer: This script is made for ethical uses...

CVE-2020-14882-checker

CVE-2020-14882 checker CVE-2020-14882 detection script This checker is based on the PoC by jas502n. Using a gadget, it tries to substitute the HTTP response from a page, which an unauthenticated user should not have access to. python cve202014882checker.py --ip 192.168.1.75 python...

deploy-goad

Deploy GOAD v2 on Ubuntu Linux 22.04 This script streamlines the prerequisites needed when deploying the Active Directory lab provided by https://github.com/Orange-Cyberdefense/GOAD High level description Ensure computer has VTx extensions enabled in BIOS Install Ubuntu Server 22.04 Configure...

randy

Randy What This is a pre-authenticated RCE exploit for Inductive Automation Ignition that impacts versions = 8.1.16. We failed to exploit the bugs at Pwn2Own Miami 2022 because we had a sloppy exploit and no debug environment, but since then we have found the time and energy to improve it! Author...

cs-get-last-error

cs-get-last-error Obtain error messages from GetLastError codes directly inside the Cobalt Strike client without the help of Google search, net helpmsg, or Microsoft Error Lookup Tool. The error messages are included in the aggressor script, and no interaction with the beacon is required. The...

openssl-heartbleed-fix

openssl-heartbleed-fix OpenSSL Heartbleed CVE-2014-0160 Fix script Sammy Fung [email protected] OpenSSL Heartbleed CVE-2014-0160 http://www.us-cert.gov/ncas/alerts/TA14-098A bug is now discovered by network security professionals, which many systems using some OpenSSL versions are affected. ...