vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 Remote Root Shell Exploit A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability CVE-2011-2523 present in vsFTP 2.3.4 Requirements Language Used = Python3 Modules/Packages used: socket os pexpect paramiko getpass datetime optparse...

CVE-2011-3192

CVE-2011-3192 Run it using python 3.7 or 3.10 tested on it 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks example python3 exploit.py https://example.com 50...

vsftpd2.3.4PyExploit

vsftpd2.3.4PyExploit An exploit to get root in vsftpd 2.3.4 CVE-2011-2523 written in python Usage: ./exploit.py $VictimIPaddress Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume wha...

apache__myfaces_CVE-2011-4367_2-0-11

Apache's implementation of the JavaServer Faces JSF and Jakarta Faces specification Branches main Jakarta Faces 5.0 implementation 4.1.x Jakarta Faces 4.1 implementation 4.0.x...

GO-CVE-2011-4862

CVE-2011-4862 GO Exploit for CVE-2011-4862 Cross Compile with: GOOS=linux GOARCH=arm go build main.go...

CVE-2011-3192-apache-exploit

CVE-2011-3192 This exploit triggers a denial of service condition in Apache versions 1.3.x, 2.0.64 and below and 2.2.19 and below. Developed in 2011 by Antonius ev1lut10n / w1sdom...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Patched version of the uploader.swf and uploaderSingle.swf to fix CVE-2011-2461 More info about the vulnerable .swf files in the Magento's core can be found here - https://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html The...

TWSL2011-007_iOS_code_workaround

= testcert Reference implementation for TWSL2011-007 vulnerability workaround aka CVE-2011-0228. Author: Eric Monti Date: July 28, 2011 = Compiling Compile with your Apple iOS SDK CFLAGS along with: gcc -o testcert testcert.m -framework Foundation -framework Security The compile arguments above...

isslfix

iOS : iSSLFix: Certificate in chain starting at has isCA=0 = possible MITM attempt, making valida...

KillApachePy

보안 트렌드를 팔로우하고 있다면 특수하게 제작된 Range 헤더CVE-2011-3192를 사용하여 다수의 Apache 버전을 대상으로 한 DoS 공격에 대해 들어본 적이 있을 것입니다. 원본 PoCkillapache.pl를 기반으로 Python 버전을 만들었으며, 더 사용자 친화적이고 몇 가지 프로그램 작업 흐름 개선 사항시스템 허용 최대 스레드 수 자동 사용, 사용자 정의 HTTP 메서드GET/HEAD/... 설정, 사용자 정의 대상 페이지 검색, 프록시 지원 등이 포함되어 있습니다. p.s. 이 도구를 실행하려면 Pytho...

ParrotNG

ParrotNG ParrotNG is a tool capable of identifying Adobe Flex applications SWF vulnerable to CVE-2011-2461. For more details, please refer to the slides of our Troopers 2015 talk. Download the latest release from HERE. Features Written in Java, based on swfdump One JAR, two flavors: command line...

CVE-2011-0104-reproduction

This repository does not have a README...

vsftpd-2.3.4---Backdoor-Command-Execution

vsftpd-2.3.4---Backdoor-Command-Execution vsftpd 2.3.4 CVE-2011-2523 a critical vulnerability that leads to Root Shell. In this repo I will do a PoC of how to exploit it step by step, Manually & Automatically Python for educational purposes. What is the vulnerability about ? Firstlly, it is a...

CVE-2011-3368

Este repositorio no tiene un README...

Metasploitable2-VAPT-Report

VAPT Report: Metasploitable 2 System Compromise Project Overview This repository contains a comprehensive Vulnerability Assessment and Penetration Testing VAPT report for the Metasploitable 2 vulnerable environment. The assessment follows the standard 5-phase ethical hacking methodology,...

SmileySploit

SmileySploit A basic script that exploits CVE-2011-2523 Overview In 2011, an integrated backdoor was found on vsFTPd servers running version 2.3.4, in which using a smiley emoticon ":" triggers a reverse connection to an attacker. With this, it is extremely easy to create an exploit script and ga...

Metasploit-Red-Pentest-Lab

Metasploit-Red-Pentest-Lab Lab exercise involving exploitation of the vsftpd 2.3.4 vulnerability CVE-2011-2523 on Metasploitable 2 and post-exploitation steps...

CVE-2011-4107

此存储库没有 README。...

bash-tls-reneg-attack

bash-tls-reneg-attack openssl 클라이언트를 사용하여 서버에 TLS 재협상 플러딩을 시도하는 bash 스크립트입니다. 자세한 내용은 CVE-2011-1473 및 CVE-2011-1473을 참조하세요. 사용법: ./tls-reneg.sh some.hostname.here:port...

WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)

A directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F encoded dot dot sequences in the url parameter. id: CVE-2011-1669 info: name: WP Custom Pages 0.5.0.1 - Local File Inclusion LFI...