bazad5

bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...

CVE-2015-6637

CVE-2015-6637 PoC by Edward Hung Please backup your device while run PoC https://source.android.com/security/bulletin/2016-01-01.html...

DirtyCow-EXP

DirtyCow-EXP Compiled Dirty Cow vulnerability CVE-2016-5195 EXP, divided into Linux platform and Android platform. For detailed vulnerability reproduction, please refer to: https://brucetg.github.io/2018/05/27/DirtyCow%EF%BC%88%E8%84%8F%E7%89%9B%EF%BC%89%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php. How to Use 1. Clone the repository: git clone https://github.com/Hakchoven/wp-mail-masta-exploit.git 2...

cve-2016-0040

cve-2016-0040 poc for cve-2016-0040 bug found and exploited by Meysam Firozi @R00tkitSmm this poc help write arbitrary data to arbitrary address in windows kernel for more info see ny blog : http://ioctl.ir/index.php/2016/02/13/cve-2016-0040-story-of-uninitialized-pointer/...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

asa_tools

Cisco ASA RCE Verification This script can be used to verify the presence of CVE-2016-1287. It requires python3 and the python hexdump module to be installed $ sudo pip3 install hexdump It can be run as follows python3 cisco-asa.py IP.IP.IP.IP:port...

PSSRoot

One-Click-Root program based on CVE-2016-5195 or "DirtyCOW"; this should work with the PlayStation Certified devices, but it may come in handy for other old android devices too; Tested on : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-313065 Sony Tablet ...

MS16-032

MS16-032CVE-2016-0099 for SERVICE ONLY this exploit can only use on SERVICE do logical exploit,on logical exploits...

CVE-2016-2107

CVE-2016-2107 Simple test for the May 2016 OpenSSL padding oracle CVE-2016-2107 Installation $ go version go version go1.6.2 darwin/amd64 $ go get github.com/FiloSottile/CVE-2016-2107 This tool only builds with Go 1.6+, and only when downloaded to the right position in the $GOPATH. Usage $...

initroot

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...

CVE-2016-3510

CVE-2016-3510...

spb

spb Shortest Path Bridging vulnerability testing scripts used to find CVE-2016-2783...

beanshooter

beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...

Ticketbleed

Ticketbleed This tool is for exploiting Ticketbleed CVE-2016-9244 vulnerability, the Ticketbleed library inside src folder is a modified version of go's crypto/tls, it has few changes inside handshakeclient.go, tls.go, common.go files but it is almost same. BUILD cd Ticketbleed mv...

CVE-2016-3714.ansible.role

Ansible Role: CVE-2016-3714 Fix ImageMagick Command Injection CVE-2016-3714 security issue with Ansible. Requirements Any installed imagemagick and before v6.7.7.10 machine. Role Variables A description of the settable variables for this role should go here, including any variables that are in...

scan-dirtycow

Dirty Cow Kernel Checker Scan vuls kernel CVE-2016-5195 - DirtyCow Usage Local System git clone https://github.com/aishee/scan-dirtycow cd scan-dirtycow && chmod +x dirtycowscan.sh && ./dirtycowscan.sh Vulnerable Kernels RedHat Debian Ubuntu: 12.04-14.04-16.04 References https://dirtycow.ninja/...

CVE-2016-2098

CVE-2016-2098 CVE-2016-2098 POC...

IOFireWireFamily-overflow

IOFireWireFamily-overflow IOFireWireFamily-overflow is a proof-of-concept exploit for CVE-2016-7608, a buffer overflow in IOFireWireUserClient that was fixed in macOS Sierra 10.12.2. This vulnerability can be triggered to cause denial of service or possibly arbitrary code execution on devices wit...