116190 matches found
CVE-2020-5902
CVE-2020-5902 CVE-2020-5902 利用工具 POC bash 版本...
CVE-2012-2982
CVE-2012-2982 针对CVE-2012-2982(Webmin 1.580)的Python POC,由用户 OstojaOfficial 在原版基础上改进。 这是原始脚本的改进版本,用户无需查看整个脚本即可了解输入数据的格式。为此,只需将该部分代码移至开头: 同时,添加了一个退出指令以防止脚本继续运行(sys.exit1)。 还增加了用户可以在调用漏洞利用工具时指定Webmin 1.580服务运行端口的功能。 由于添加了一个新的输入项,所有其他数据也随之调整,同时修改了用于登录和利用漏洞的查询URL。 最后,添加了主功能,当所有数据正确接收时脚本将执行该功能。...
CVE-2021-42013
CVE-2021-42013 Vulnerability Scanner This Python script checks for the Remote Code Execution RCE vulnerability CVE-2021-42013 in Apache 2.4.50. Introduction This script is designed to help identify if a server is vulnerable to the CVE-2021-42013 RCE vulnerability in Apache 2.4.50. It checks the...
cve-2021-41773-and-cve-2021-42013
cve-2021-41773 and cve-2021-42013 cve-2021-41773 and cve-2021-42013 batch verification Python script Runtime environment: python3 Usage: python3 poc.py url.txt url.txt contains the URLs to be tested, and URLs with vulnerabilities will be written to success.txt The verification content is very...
attackintel
更新(2018年11月26日) MITRE已弃用ATT&CK API功能,并将在不久后逐步淘汰。他们已转向使用STIX。我的代码仍可供参考,但你可以查看我处于初步开发阶段的ATT&CK Intel Webapp,它提供相同的信息。链接如下。我始终在寻求改进。如果你对Webapp有建议,请发送至gr4ym4ntxatgmaildotcom。享受吧。 ATT&CK INTEL Webapp ATT&CK Intel 一个简单的Python脚本,用于查询MITRE ATT&CK API,获取特定威胁组织的战术、技术、缓解措施和检测方法。 目标 快速获取特定威胁来自MITRE ATT&CK...
CVE-2020-13942-POC-
CVE-2020-13942 POC + Script de Automatización Pasos Paso 1 : Enumera todos los subdominios objetivo para tu programa de bug bounty favorito Paso 2 : Colócalos en el archivo targets.txt Paso 3 : Ejecuta el Script Paso 4 : Si encuentras un objetivo vulnerable, no olvides mencionarme :...
CVE-2026-30502-OpenKM-6.3.12-Reflected-XSS
🛡️ CVE-2026-30502 — XSS Reflejado en OpenKM v6.3.12 Descubierto e informado porDharmendra Kumar — Investigador de Seguridad Ciberseguridad | Pruebas de Penetración | Investigación de Vulnerabilidades | Divulgación Responsable 📌 Tabla de Contenidos Resumen Detalles del CVE Producto Afectado...
CVE-2024-24919
CVE-2024-24919 Script de Nmap para comprobar la vulnerabilidad CVE-2024-24919 Referencias de la vulnerabilidad: https://www.cvedetails.com/cve/CVE-2024-24919/ https://support.checkpoint.com/results/sk/sk182336 Dorks Hunter Hunter: /product.name="Check Point SSL Network Extender" Shodan SHODAN:...
CVE-2024-38856
CVE-2024-38856 Apache Ofbiz RCE Scanner Description This script is designed to scan for the CVE-2024-38856 vulnerability in Apache Ofbiz applications, which may allow for remote code execution. It sends HTTP POST requests to specific paths within the Ofbiz application with malicious payloads to...
CVE-2022-47966_checker
CVE-2022-47966checker Quick and dirty powershell script to look for ManageEngine CVE-2022-47966 IOCs. The script will parse requests in ME HTTP access logs. If a characteristic SAML request is found, it will attempt to decode and extract the attacker's payload. Findings are written to...
CVE-2022-36804
CVE-2022-36804 Puedes encontrar un script en Python para explotar la vulnerabilidad en Bitbucket relacionada con CVE-2022-36804. .,;;. .:lll:. 'clllllc. ,llolllooc' 'loooooooool, .;ooooooooooo;. .:;..;odddddddddo:. 'ldo:. ,llccoddddddc. ,oddddc. .. .:dddddddl' .;dxxxxxxc. .;dxxxxxxo, .:dxxxxxxo'...
CVE-2023-25157-checker
CVE-2023-25157-checker A script, written in golang. POC for CVE-2023-25157 Steps to use 1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git 2. cd CVE-2023-25157-checker 3. go run CVE-2023-25157.go Replace with the URL of the target server. Google Dork...
http-pulse_ssl_vpn.nse
SUMMARY Simple NSE script to detect Pulse Secure SSL VPN file disclosure via specially crafted HTTP resource requests. This exploit reads /etc/passwd as a proof of concept This vulnerability affect 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4. INSTALLATION $ git clone...
CVE-2024-9047-PoC
脚本仅限用于授权系统检测,引用请注明出处。 更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X 批量检测: python poc.py -f url.txt 单个检测: python poc.py -u your-ip...
CVE-2026-59310
CVE-2026-59310 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...
F5-BIG-IP-RCE-CVE-2022-1388
CVE-2022-1388 F5 BIG-IP RCE Multi-threaded Detection Usage: 单个url: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx 批量多线程: python3 CVE-2022-1388.py -f url.txt 执行命令: python3 CVE-2022-1388.py -u https://xxx.xxx.xxx.xxx -c whoami Result:...
CVE-2024-36401
CVE-2024-36401 这是用于检查CVE-2024-36401漏洞的程序。 使用方法 首先,执行以下命令,进入通信监听状态。 nc -lvnp 9000 然后在另一个终端窗口中执行文件。 python CVE-2024-36401.py --target example.com --targetport 8080 --myip 172.26.16.100 --myport 9000 --target 目标的域名或IP地址 --targetport 托管目标服务的端口号 --myip 自己的IP地址 --myport nc监听的端口号 免责声明...
CVE-2018-7600
CVE-2018-7600 CVE-2018-7600 Exploit Cambia TARGET en exploit.py $ python3 exploit.py Success: Check http://127.0.0.1:8080/hello.txt...
CVE-2023-25157
CVE-2023-25157 This is a simple Python Script to Find the Latest GeoServer SQL Injection Vulnerability. You can use the Scripts on hosts to check for infected path. Installation: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh Note: You...