CVE-2017-10271

CVE-2017-10271 سكربت كشف ثغرة إلغاء التسلسل في مكوّن wls-wsat في WebLogic CVE-2017-10271 الاستخدام root@kitploit: $ python CVE-2017-10271 url بالإضافة إلى ذلك، تحتاج إلى تسجيل حساب في ceye.io، وإدخال Identifier وAPI Token المقدمين منه في الجزء التالي من الكود: الوظائف يكتشف وجود ثغرة تنفيذ الأوام...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/Jerry-zhuang/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

nfsen_1.3.7_CVE-2017-6971

This repository does not have a README...

CVE-2017-12149

CVE-2017-12149 Update of https://github.com/1337g/CVE-2017-12149 to work with python3 Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

weblogic_wls_rce_poc-exp

weblogicwls-wsatcomponentdeserialisationrcecve-2017-10271 poc&exp exp fonctionne uniquement si le chemin existe peut fonctionner pour un seul ou plusieurs ==juste pour apprendre==...

CVE-2017-7525-Jackson-Deserialization-Lab

CVE-2017-7525 مختبر إلغاء التسلسل غير الآمن في Java تطبيق REST أساسي بلغة Java معرض لثغرة إلغاء التسلسل غير الآمن، مما يؤدي إلى تنفيذ أوامر عن بعد RCE. يجب تشغيل المشروع على Java 8u45 مبني على Maven مع التبعيات التالية: jackson-databind 2.2.2 commons-collections 3.1 spring-context-support 4.3.11...

s2-048

s2-048 استغلال لـ s2-048، CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

SNP-Assignment

SNP-Assignment Exploit work Privilege Escalation CVE-2017-1000112 as the privilege escalation is the mile stone of an attakers view,i try to do a little research on loval privilege escalation which is the basic step of whole privilege escalation unit. while im reading some articles 2016 and 2017...

ABC

ABC CVE-2017-11882 Invoke-Mimikatz https://goo.gl/urb92R Calc.exe https://goo.gl/qTqqE4...

CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC for CVE-2017-16744 and CVE-2017-16748 Proof of Concept PoC CVE: 2017-16744 and 2017-16748 Date: 09/09/2019 Exploit Author: GainSec - Jon Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 and prior as well as Niagara 4 Versions: 4.4 and prior...

CVE-2017-5487

CVE-2017-5487 POC of CVE-2017-5487 + tool...

CVE-2017-16088

CVE-2017-16088 Exploit CVE-2017-16088 https://www.wispwisp.com/?p=559...

Struts2-045-Exp

Struts2 S2-045 CVE-2017-5638 Exp Tools Exp Function: Command Execute Get Target Website's Physical Path File Upload Getshell Default Webshell For Chopper Support HTTP/HTTPS Support URL With Any Port Note: Default Webshell's Password is s2045@exp Notice The Project Is Intended For...

SpringBreakPoC

SpringBreakPoC I needed a tool to test several different endpoints for the recently disclosed SpringBreak vulnerability CVE-2017-8046 and couldn't find one, so I threw this together. Usage root@kitploit: \ \ / /| \ \ \ | \ /\ | /| || | | \ || /| | || /| || \ / / | | || | | | | \ | || | | / / |...

CVE-2017-7529-POC

CVE-2017-7529-POC POC for CVE-2017-7529...

CVE-2017-9554-Exploit-Tool

CVE-2017-9554-Exploit-Tool CVE-2017-9554 Exploit Tool Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' User Enumeration EXPLOIT Tool Exploit Author : Steve Kaun Exploit Tool Author : Ez0-yf Vendor Homepage : https://www.synology.com Version : Before 6.1.3-15152 CVE : CVE-2017-955...

spectre-attack

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...

CVE-2017-8464

CVE-2017-8464 EXPAMPLE Support x86 and x64 Just for test USB drive POC https://youtu.be/kYj1lAxl3DE...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...