struts-pwn

struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...

jboss-deserialization

JBoss Insecure Deserialization to RCE via CVE-2017-12149. JBoss Insecure Deserialization - RCE Exploitation Lab. The idea here is to setup a lab with an old JBoss version 7.0 in order to exploit the vulnerability. We can use Docker to facilitate all the process. For this, we're gonna need an Orac...

CVE-2017-9805-Exploit

This repository does not have a README...

cve

POC CVE-2017-16231 CVE-2017-16232 CVE-2017-16840 CVE-2019-9116...

CVE-2017-8046-DEMO

spring data rest CVE-2017-8046 demo test please UPGRADE spring data rest NOW. steps 启动本应用 创建test instance root@kitploit: POST /entityPersons/ HTTP/1.1 Host: localhost:8080 Content-Type: application/json Cache-Control: no-cache "firstName":"f2" 利用spel注入, 会启动C:\Windows\system32\calc.exe...

CVE-2017-0505-mtk

This repository does not have a README...

cve-2017-0263-poc

cve-2017-0263-poc poc for 0263...

CodePath_Week_7-8

CodePath Week 7-8 CodePath Assignment for Weeks 7 & 8: CVE-2017-14719, CVE-2019-9787 & Unauthenticated Page/Post Content Modification via REST API Project 7 - WordPress Pentesting Time spent: 16 hours spent in total Objective: Find, analyze, recreate, and document vulnerabilities affecting an old...

CVE-2017-9805_example_build

This repository does not have a README...

Etern-blue-Windows-7-Checker

Eternalblue SMB1 Windows7/10 checker Updated and now detects Windows 7 and as well as old version Windows 10 that supports SMB 1. I only implemented smb 1 and any smb 2 server you try this on will return a "not vulnerabile". I researched on how the structure of a SMB1 packet and how to constructe...

CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION

CVE-2017-5638-Remote-Code-Execution-Apache-Struts2-EXPLOITATION...

cve-2017-1182-TN

cve-2017-1182-TN Malware Analysis Testing...

amthoneypot

Honeypot for Intel's AMT Firmware Vulnerability CVE-2017-5689. Webserver that listens on TCP - Daemonizeport 16922. Replicates the behaviour of Intel's AMT management service. Daemonize Building - go build server.go Running - ./server logfile.txt TODO Add templating to make content dynamic / rand...

chef_tissues

Tissues Install patch for CVE-2017-0145 AKA WannaCry. More Info: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt Usage: root@kitploit: "name":"mynode", "runlist": "recipetissues"...

CVE-2017-1000117

CVE-2017-1000117 - PoCs root@kitploit: git clone --recurse-submodules "https://github.com/Manouchehri/CVE-2017-1000117.git" cat /tmp/pwned.txt Go root@kitploit: go get "github.com/Manouchehri/CVE-2017-1000117" cat /tmp/pwned.txt...

PHPunit-Exploit

PHPunit Exploiter + Checker CVE-2017-9841 Overview : PHPUnit is a unit test framework for the PHP programming language. This is a sample xUnit architecture for a unit testing framework that originated with SUnit and became popular with JUnit. PHPUnit was created by Sebastian Bergmann Installation...

CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-

This repository does not have a README...

nfsen_1.3.7_CVE-2017-6971

This repository does not have a README...

weblogic_wls_rce_poc-exp

weblogicwls-wsatcomponentdeserialisationrcecve-2017-10271 poc&exp exp only works while the path is exist can works for single or multiple ==just for learn==...

s2-048

s2-048 Exp for s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...