UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

sunset-noontide-pentesting

Sunset: Noontide — Penetration Testing A professional penetration testing assessment and CTF walkthrough of Sunset: Noontide , an intentionally vulnerable machine from VulnHub. This project documents the complete penetration testing lifecycle, including reconnaissance, service enumeration,...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

Embedded-Backdoor-Connection

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

OutlookLeakTest

The Outlook HTML Leak Test Project! Blog post: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/may/smb-hash-hijacking-and-user-tracking-in-ms-outlook/ What's in "./Schemes-List.xlsx"? List of URI schemes that might work in Windows. These schemes/protocols can be useful in...

-cve-2010-3904-report

This repository does not have a README...

android-cve-2010-4804

Proof of Concept for Android Data Stealing Vulnerability. CVE-2010-4804 Original advisory...

CVE-2010-2039

This repository does not have a README...

CVE-2020-17144-EXP

CVE-2020-17144-EXP 条件: Exchange2010; 普通用户 默认用法写webshell: CVE-2020-17144-EXP.exe mail.example.com user pass 执行命令 & 端口复用: 修改ExploitClass.cs 参考 @zcgonvh...

NtlmRelayToEWS

ntlmRelayToEWS Author: Arno0x0x - @Arno0x0x ntlmRelayToEWS is a tool for performing ntlm relay attacks on Exchange Web Services EWS. It spawns an SMBListener on port 445 and an HTTPListener on port 80, waiting for incoming connection from the victim. Once the victim connects to one of the...

w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 Remote code execution running on w3 total cache cve 2013-2010 Usage: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" Output: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import request...

CVE-2020-17144

weaponized tool for CVE-2020-17144Microsoft Exchange 2010 MRM.AutoTag.Model unsafe deserialize vulnerability build install .net framework 3.5 first, then make. usage CVE-2020-17144 After exploit, access http://target/ews/soap/?pass=whoami to get command execution. And you can also modify e.cs as ...

cve-2010-1622_learning_environment

cve-2010-1622learningenvironment tomcat 6.0.26 Jdk1.8.45 This Project Include simple SpringMvc source code and a Dockerfile you can use to build the environment...

ROOT-OS-DEBIAN-13-CVE-2010-4563 CVE-2010-4563 in linux - Patched by Root

Root has patched CVE-2010-4563 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2010-5321 CVE-2010-5321 in linux - Patched by Root

Root has patched CVE-2010-5321 in the linux package for Root:Debian:13. Multiple fixed versions available...

Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion

A directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1953 info: name: Joomla! Component iNetLanka Multiple Map 1.0 - Local Fil...

Joomla! Component redSHOP 1.0 - Local File Inclusion

A directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1531 info: name: Joomla! Component redSHOP 1.0 - Local File Inclusion author: daffainfo...

Joomla! Component Jstore - 'Controller' Local File Inclusion

A directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-5286 info: name: Joomla! Component Jstore - 'Controller...

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion

A directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1532 info: name: Joomla!...