CVE-2016-3088

CVE-2016-3088...

CVE-2016-10033-PoC

CVE-2016-10033-PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Has interactive shell, nice argparse stuff asw Usage usage: poc.py -h --target TARGET --backdoor BACKDOOR --proxy --raw...

CVE-2016-4977-POC

This repository does not have a README...

CVE-2016-7255

CVE-2016-7255 Proof Of Concept privilege escalation exploit using CVE-2016-7255, aims to mirror the functionality of the exploit found in the wild as described by Trend Micro. You may want to fix the recovery before using this anywhere important. Some code taken from tinysec's original crash PoC...

bd-alaris-firmware-analysis

BD Alaris 8015 Firmware Security Analysis Firmware Security Analysis of the BD Alaris 8015 PC Unit: Unencrypted Wi-Fi Credential Storage and Compound Vulnerabilities CVE-2016-9355 -orange Overview This project presents a firmware security analysis of the BD Alaris 8015 Point-of-Care PC infusion...

dh-CVE_2016_2098

== README Proof of concept for https://groups.google.com/forum/!topic/rubyonrails-security/ly-IH-fxrQ == Exploiting: 1. You should only run rails server in a way that you are certain will not open you up to being exploited 2. Run rails s 3. Execute the following command curl -v -H "Accept:...

bootmodechecker

bootmodechecker This app checks if your Nexus 6/6P is still vulnerable to CVE-2016-8467 and/or if your bootmode property has been tampered with. Also available under Google Play: https://play.google.com/store/apps/details?id=roeeh.bootmodechecker...

org.cowpoop.moooooo

org.cowpoop.moooooo Android APK Based On Public Information Using DirtyCOW CVE-2016-5195 Exploit THIS IS A CURRENTLY A NON-WORKING APPLICATION I WILL REMOVE THIS ONCE TESTING IS SUCCESSFUL...

Ticketbleed

Ticketbleed This tool is for exploiting Ticketbleed CVE-2016-9244 vulnerability, the Ticketbleed library inside src folder is a modified version of go's crypto/tls, it has few changes inside handshakeclient.go, tls.go, common.go files but it is almost same. BUILD cd Ticketbleed mv...

The-exploitation-of-Dirty-Cow-CVE-2016-5195

This repository does not have a README...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

MS16-051-poc

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE 11. Write-up https://www.deamwork.com/archives/patch-analysis-of-cve-2016-0189.orz6 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2...

Active-Directory-Health-Check

🛡️ Active Directory Health Check v2.14.2 🇩🇪 Deutsch | 🇬🇧 English Ein umfassendes PowerShell-Skript zur automatisierten Überprüfung der Gesundheit und Sicherheit einer Active Directory-Umgebung. Mit Best-Practice-Bewertung, farbcodiertem HTML-Report und CSV-Export. DE: Auswahlfenster der GUI:...

asa_tools

Cisco ASA RCE Verification This script can be used to verify the presence of CVE-2016-1287. It requires python3 and the python hexdump module to be installed $ sudo pip3 install hexdump It can be run as follows python3 cisco-asa.py IP.IP.IP.IP:port...

CVE-2016-6210

CVE-2016-6210 User name enumeration against SSH daemons affected by CVE-2016-6210. Use against your own hosts only! Attacking stuff you are not permitted to may put you in big trouble! INSTALATION Clone the Repository: git clone https://github.com/coolbabayaga/CVE-2016-6210.git cd...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 Simple ansible playbook to patch mysql servers against CVE-2016-6662. UPDATE 20160915.2347.CEST: Kenny informed me of Patrick Forsberg's catch that the original patch did not safeguard against ../ abuse. I've now replaced the patch with one that is more stringent based...

Dirty-COW-CVE-2016-5195-Testing

Dirty-COW-CVE-2016-5195-Testing Dirty COW CVE-2016-5195 Testing...

pwnfest2016

pwnfest2016 full exploit for cve-2016-9651 used in pwnfest2016, slide and full text of syscan360 2017...

certPinningVulnerableOkHttp

OkHttp simple-client app vulnerable to CVE-2016-2402 This is a fork of the default simple-client from the okhttp project. Simple-client is a Java app that just does a GET request to https://api.github.com and fetches the names of okhttp's contributors. This fork has been edited so that OkHttp 3.0...