rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

S2-055

S2-055 Exploit de vulnerabilidad de deserialización CVE-2017-7525 Proceso de explotación javac ExploitCommand.java root@kitploit: package exploit; import com.sun.org.apache.xalan.internal.xsltc.DOM; import com.sun.org.apache.xalan.internal.xsltc.TransletException; import...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

cve-2017-1635-PoC

cve-2017-1635-PoC poc basado en: https://github.com/emcalv/tivoli-poc...

CVE-2017-1000117

Test repository to check Git's vulnerability CVE-2017-1000117 ¿Cómo funciona? Clona este repositorio de forma recursiva. La frase 「うんこもりもり」que significa algo como "Un montón de mierda" se mostrará en tu terminal. root@kitploit: $ git clone --recursive https://github.com/greymd/CVE-2017-1000117.gi...

CVE-2017-8890

Este repositorio no tiene un README...

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 Cross Site Scripting XSS Número CVE asignado: CVE-2017-9609...

Struts2-048

Struts2-048 CVE-2017-9791 Autor: DragonEgg root@kitploit: def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...

exploiting-cve-2017-5123

Exploiting CVE-2017-5123 Introduction This repository is an addition to the article published in MISC Magazine 96. We achieved to elevate our privileges in a reliable way, on our virtual machine with SMEP / SMAP and KASLR enabled. It should however be noted that the system if left in an unstable...

ExpStruts

ExpStruts ExpStruts es un explotador masivo basado en PHP para CVE-2017-5638 .. Capturas de pantalla ⚠️ Requisitos Python3 para el Google Scraper de MakMan Abk Khan @asystolik...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identifique vulnerabilidades potenciales con verificaciones de explotación de CVE-2017-7921 o probando la URI /onvif-http/snapshot?auth=YWRtaW46MTEK en direcciones IP objetivo usando un enfoque multi-hilo para resultados más rápidos. Requirements root@kitploit: python3...

amt_auth_bypass_poc

Ejemplo de omisión de autenticación de Intel AMT Este es un código de prueba de concepto que demuestra la explotación de la vulnerabilidad CVE-2017-5689. Es esencialmente un script de mitmproxy que simplemente vacía un campo "response" del encabezado Authorization. Ejemplo de uso: root@kitploit:...

CVE-2017-12615-EXP

CVE-2017-12615-EXP root@kitploit: .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !:...

Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal

Schneider Electric Pelco VideoXpert Enterprise versions 2.0 and prior contain a directory traversal caused by insufficient input validation, letting unauthorized persons view web server files, exploit requires no authentication. id: CVE-2017-9965 info: name: Schneider Electric Pelco VideoXpert...

DokuWiki - Cross-Site Scripting

DokuWiki through 2017-02-19b contains a cross-site scripting vulnerability in the DATEAT parameter to doku.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Node.js <8.6.0 - Directory Traversal

Node.js before 8.6.0 allows remote attackers to access unintended files because a change to ".." handling is incompatible with the pathname validation used by unspecified community modules. id: CVE-2017-14849 info: name: Node.js 8.6.0 - Directory Traversal author: RandomRobbie severity: high...

WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting

WSO2 Data Analytics Server 3.1.0 is susceptible to cross-site scripting in carbon/resources/addcollectionajaxprocessor.jsp via the collectionName or parentPath parameter. id: CVE-2017-14651 info: name: WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting author: mass0ma severity: medium...

HPE System Management - Cross-Site Scripting

HPE System Management contains a cross-site scripting vulnerability which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other...

SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting

The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. id: CVE-2017-18518 info: name: SMTP by BestWebSoft 1.1.0 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues. impact: |...

WordPress Mailster <=1.5.4 - Cross-Site Scripting

WordPress Mailster 1.5.4 and before contains a cross-site scripting vulnerability in the unsubscribe handler via the mes parameter to view/subscription/unsubscribe2.php. id: CVE-2017-17451 info: name: WordPress Mailster =1.5.5 which includes a fix for this vulnerability. reference: -...