mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux root@kitploit: a...

MikroRoot

MikroRoot Automated version of CVE-2018-14847. It will scrape shodan for vulnerable host and then try to exploit them. How to use Note that this script will NOT run with Python2.x. Use only Python 3+ MikroRoot: python3 MikroRoot.py -k SHODANKEY -p page count User: ncss Pass: ncss!@2018 IP: 1.2.3....

Mongobleed-Detector-CVE-2025-14847

MongoBleed Scanner A professional vulnerability scanner for CVE-2025-14847 MongoBleed - MongoDB Memory Leak Vulnerability. root@kitploit: +================================================================+ | MongoBleed Scanner v1.3.0 | | CVE-2025-14847 - MongoDB Memory Leak Vulnerability |...

mongobleed

mongobleed CVE-2025-14847 exploit para la divulgación de memoria heap de MongoDB mediante una sobrelectura del búfer OPCOMPRESSED. Uso root@kitploit: $ bundle exec ruby mongobleed.rb --help Usage: mongobleed.rb options --host HOST Target host default: localhost --port PORT Target port default:...

MongoDeepDive

🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Exploit CVE-2025-14847 Advanced Heuristics Analyzer for Red Team Operations 💀 Overview MongoDeepDive is a high-performance, asynchronous vulnerability scanner and forensic analyzer designed to detect uninitialized memory leaks in MongoDB servers...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

mongobleed-detector

MongoBleed Detector Offline MongoDB Analysis Tool for CVE-2025-14847 MongoBleed A standalone Linux command-line tool that analyzes MongoDB data to identify likely exploitation of CVE-2025-14847 using multiple detection modules. Table of Contents Overview Detection Modules Requirements Installatio...

winboxPOC

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script is simple used with simple arguments in the...

Mikrotik-router-hack

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and updat...

mikrotik-beast

Mikrotik Beast tool Mass MikroTik WinBox Exploitation tool, CVE-2018-14847 This tool allows you to scan a range of network hosts CIDR against the CVE-2018-14847 winbox exploit. Usage $ python3 mikrotikbeast.py Accepted input examples Example 1: '192.168.5.0/24' Example 2: '172.16.0.0/16' NOTES:...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

CVE-2025-14847_Expolit

Este repositorio no tiene un README...

CVE-2025-14847

MongoBleed PoC CVE-2025-14847 Ethical Disclosure & Disclaimer This tool is provided for educational purposes only and for use in authorized security auditing. The purpose of this PoC is to help system administrators and security researchers: 1. Verify if a MongoDB instance is vulnerable to...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

MongoBleed

MongoBleed CVE-2025-14847 Escáner y Kit de Explotación Un kit de investigación de seguridad para MongoBleed, una fuga de memoria crítica no autenticada en la descompresión zlib de MongoDB que permite a atacantes extraer datos sensibles de la memoria heap del servidor sin autenticación...

CVE-2018-14847

CVE-2018-14847 create global proxy based on RouterOS via CVE-2018-14847 How To Use prepare root@kitploit: pip3 install paramiko ipcalc optparse hashlib usage for ip file root@kitploit: python3 loop.py -f list.txt for single ip root@kitploit: python3 loop.py ip Copyright the poc part in this...

MongoBleed-CVE-2025-14847-Fully-Automated-scanner

This repository does not have a README...

CVE-2025-14847-PoC

CVE-2025-14847 Prueba de Concepto Aviso de Investigación Académica y Defensiva Este repositorio contiene una prueba de concepto PoC desarrollada estrictamente para análisis académico, investigación defensiva y fines de validación de vulnerabilidades. El objetivo de este proyecto es ayudar a los...

mongobleed

MongoDB Compression Leak Lab Safe, Educational Reference CVE : CVE-2025-14847 This repository is an educational lab that demonstrates the concept behind a class of issues often described as “compression framing / size-metadata memory disclosure” in database wire protocols. It is written to suppor...