CVE-2015-6637

CVE-2015-6637 PoC by Edward Hung Please backup your device while run PoC https://source.android.com/security/bulletin/2016-01-01.html...

spb

spb Shortest Path Bridging vulnerability testing scripts used to find CVE-2016-2783...

dh-CVE_2016_2098

== README Proof of concept for https://groups.google.com/forum/!topic/rubyonrails-security/ly-IH-fxrQ == Exploiting: 1. You should only run rails server in a way that you are certain will not open you up to being exploited 2. Run rails s 3. Execute the following command curl -v -H "Accept:...

PSSRoot

Programme One-Click-Root basé sur CVE-2016-5195 ou "DirtyCOW"; cela devrait fonctionner avec les appareils certifiés PlayStation, mais peut également être utile pour d'autres vieux appareils Android ; Testé sur : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel...

org.cowpoop.moooooo

org.cowpoop.moooooo Android APK Based On Public Information Using DirtyCOW CVE-2016-5195 Exploit THIS IS A CURRENTLY A NON-WORKING APPLICATION I WILL REMOVE THIS ONCE TESTING IS SUCCESSFUL...

cve-2016-6662

About Some help to explot CVE-2016-6662 Warnings Make sure to change the attacker IP in the c file before compiling Credit All credit to original discoverer. Writeups here: http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html Discussion here:...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit Этот скрипт эксплуатирует уязвимость CVE-2016-10956 в WordPress Plugin Mail Masta 1.0 для извлечения учётных данных из wp-config.php. Как использовать 1. Клонируйте репозиторий: git clone https://github.com/Hakchoven/wp-mail-masta-exploit.g...

CVE-2020-1350

CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...

scan-dirtycow

Dirty Cow Kernel Checker Scan vuls kernel CVE-2016-5195 - DirtyCow Usage Local System git clone https://github.com/aishee/scan-dirtycow cd scan-dirtycow && chmod +x dirtycowscan.sh && ./dirtycowscan.sh Vulnerable Kernels RedHat Debian Ubuntu: 12.04-14.04-16.04 References https://dirtycow.ninja/...

mach_race

Mach Race OS X Local Privilege Escalation Exploit c fG! 2015, 2016, [email protected] - https://reverse.put.as A SUID, SIP, and binary entitlements universal OS X exploit CVE-2016-1757. Usage against a SUID binary: ./machraceserver /bin/ps compatmode for i in seq 0 1000000; do...

CVE-2016-2098

CVE-2016-2098 CVE-2016-2098 POC...

CVE-2016-3510

CVE-2016-3510...

CVE-2016-5195

CVE-2016-5195 Ported golang version of dirtycow.c make setup && ./main...

initroot

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

Ticketbleed

Ticketbleed Этот инструмент предназначен для эксплуатации уязвимости Ticketbleed CVE-2016-9244. Библиотека Ticketbleed в папке src — это модифицированная версия пакета crypto/tls из Go. В файлы handshakeclient.go, tls.go, common.go внесены небольшие изменения, но в остальном она практически...

CVE-2016-5195

Description: dcow is a possible exploit of the vulnerability CVE-2016-5195. Running the program as unprivileged user on a vulnerable system, it'll modify the /etc/passwd file, forcing the password "dirtyCowFun" SHA-512, but could be modified for older standards. In case of successful execution,...

dirtycow-replacer

PLEASE NOTICE I AM NOT FORMALLY TESTING THIS CODE IT IS BEING DESIGNED AS AN EDUCATIONAL TOOL What's it do? android-dirtycow-replacer uses the CVE-2016-5195 dirtycow exploit to patch a list of over 1000 files. You can edit it to be 10000 but 1000 should do. It checks first to make sure the files...

beanshooter

beanshooter beanshooter is a JMX enumeration and attacking tool, which helps to identify common vulnerabilities on JMX endpoints. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter is a maven project and installation shou...

cert-pinning-flaw-poc

cert pinning flaw POC Simple POC script for testing CVE-2016-2402 and similar flaws. Read my blog post for details. This utility will set up a HTTPS server that servers a malicious certificate chain to the client for a specific domain. If traffic from an app with a vulnerable certificate pinning...