heartbleed

heartbleed CVE-2014-0160 OpenSSL Heartbleed Proof of Concept Download and execute the Docker container Vulnerable Nginx server root@kitploit: docker run -p 4443:443 -it --rm --name hb gescobero/heartbleed:1.0 Compile Heartbleed attack root@kitploit: gcc heartbleed.c -o heartbleed Execute it with...

poodle-attack-sandbox

poodle-attack-sandbox Overview This code is the test code for POODLECVE-2014-3566. POODLE stands for "Padding Oracle On Downgraded Legacy Encryption" and is a vulnerability in SSLv3.0. Warning If you use this code to carry out an attack, you may be arrested by the judicial authorities of your...

SHELL-SCHOCK

SHELL-SCHOCK CVE-2014-7169 Shell Shock...

cve-2014-7911-exp

cve-2014-7911-exp 针对 cve-2014-7911 的利用程序; android; java 反序列化; 系统权限; ace; 该利用程序参考了 retme7 的 exp，但 ROP 链不同。 并且最重要的部分是 Chunk Spray。 希望它能有所帮助。 环境 设备: nexus5 操作系统版本: Android4.4.4...

ssl-heartbleed.nse

ssl-heartbleed.nse Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160. This script is now basically the one Patrik Karlsson wrote with some minor changes ported from my own script. Features Includes support for FTP,SMTP,XMPP...

Heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: root@kitploit: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the...

CVE-2014-5460

This repository does not have a README...

POC-CVE-2014-0166

POC&EXP of CVE-2014-0166 WordPress 3.8.2 cookie forgery vulnerability Details of this vulnerability can be found athere There are three files: wpzerocookiegenerator.php POC to verify this vulnerability. It won't send any requests, just a local brute-forcer. Redefine variables to supply info and i...

bleed

bleed bleed is a tool to test servers for the 'Heartbleed' vulnerability CVE-2014-0160. Usage root@kitploit: $ bleed example.org Connecting... Sending Client Hello Waiting for Server Hello... Sending Heartbeat request Unexpected EOF receiving record header. Server closed connection. No heartbeat...

MaltegoHeartbleed

MaltegoHeartbleed Maltego transform to detect the OpenSSL Heartbleed vulnerability CVE-2014-0160 For more information read the write-up on my blog: http://disk0nn3ct.svbtle.com/maltego-openssl-heartbleed-transform...

CVE-2014-6271

CVE-2014-6271...

CVE-2014-6287

This repository does not have a README...

CVE-2014-8731-PoC

CVE-2014-8731-PoC - PHPMemcachedAdmin Remote Code Execution I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2014-8731-PoC...

HeartBleed-CVE-2014-0160--SCRIPTS-python3

This repository does not have a README...

ShockZaum-CVE-2014-6271

CVE-2014-6271 Script to attack shellshock vulnerability root@kitploit: ! Usage: ./ShockZaum -u 'https://nasa.gov' -c 'rm -rf /' -p '/cgi-bin/aliens.cgi'...

CVE-2014-5139

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

bash-3.2-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 3.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX.2 shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

OpenSSL_DTLS_CVE_2014_0221

OpenSSLDTLSCVE20140221 OpenSSL DTLS CVE-2014-0221 Remote Denial What is DTLS Datagram Transport Layer Security? Datagram Transport Layer Security. Physical layer TCP layer datagram support: TLS UDP layer datagram support: DTLS: Through appropriate modifications of the Handshake process, it handle...

heartbleeder

Heartbleeder 测试你的服务器是否存在 OpenSSL CVE-2014-0160 又名 Heartbleed 漏洞。 警告 ：不保证结果的准确性，你应该通过检查自己的 OpenSSL 构建版本来独立验证。 欢迎提交拉取请求。 用法 root@kitploit: $ heartbleeder example.com 不安全 - example.com:443 已启用心跳扩展且存在漏洞 多主机 可以通过设置 -hostfile 标志为包含换行符分隔地址的文件来监控多个主机。默认情况下，Web 面板可通过 http://localhost:5000 访问。 测试 PostgreSQ...

heartbleeder

Heartbleeder Tests your servers for OpenSSL CVE-2014-0160 aka Heartbleed. WARNING : No guarantees are made about the accuracy of results, and you should verify them independently by checking your OpenSSL build. Pull requests welcome. Usage root@kitploit: $ heartbleeder example.com INSECURE -...