64390 matches found
wp-allowed-hosts
WP Allowed Hosts This plugin has been created after the vulnerability known as CVE-2017-8295 has been disclosed, this plugin will protect you from that attack with no hassle, just add simple line to your wp-config.php . Installation Just download the plugin from here and upload it to your site...
CVE-2017-4878-Samples
CVE-2017-4878-Samples CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Flash exploits fec71b8479f3a416fa58580ae76a8c731c2294c24663c601a1267e0e5c2678a0 -...
weblogic-XMLDecoder
This software is for learning and communication only, any illegal use is prohibited Weblogic-XMLDecoder-GUI CVE-2017-10352 A Python GUI experimental tool. Its main function is to exploit the deserialization vulnerability caused by Weblogic XMLDecoder. Developed for learning the Python tkinter...
windows-security-cve-2017-8543
Example InSpec Profile This example shows the implementation of an InSpec profile...
CVE-2017-8759-Exploit-sample
CVE-2017-8759-Exploit-sample Ejecutando la muestra de exploit CVE-2017-8759. Flujo del exploit: La macro de Word se ejecuta en el archivo Doc1.doc. La macro descarga un archivo txt mal formateado a través de wsdl, lo que activa el registro del analizador WSDL. Luego, el registro de análisis da co...
WHS3_vulhub
CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC 정수진@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...
web-application-firewall-
Web Application Firewall Simulation Overview This project demonstrates a Web Application Firewall WAF simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits th...
RTF_11882_0802
RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...
Stutsfi
Stutsfi Un exploit para la vulnerabilidad de ejecución remota de código RCE CVE-2017-5638 en Apache Struts 2...
CVE-2017-16997-poc
Usage Run ./CVE-2017-16997.sh . If run as non-root user, make sure you can elevate to root via sudo. Details 1. https://nvd.nist.gov/vuln/detail/CVE-2017-16997...
2017-11-17-Maldoc-Using-CVE-2017-0199
This repository does not have a README...
libxml2-exploit
libxml2-exploit An example exploit for CVE-2017-7376 Install Download this repo and a vulnerable version of libxml2, e.g. v2.7.7: root@kitploit: git clone https://github.com/brahmstaedt/libxml2-exploit.git cd libxml2-exploit wget https://github.com/GNOME/libxml2/archive/v2.7.7.zip unzip v2.7.7.zi...
Apache-Struts-2-CVE-2017-5638-Exploit-
Apache-Struts-2-CVE-2017-5638-Exploit This exploit exploits the Apache Struts2 vulnerability CVE-2017-5638, allowing us to execute commands remotely on the apache server How to use: $ sudo python Struts2Shell001.py root@kitploit: ! Exploit Apache Struts2 DEMO Code of Rvbk + HOST con https Site wi...
CVE-2017-8917-Joomla-370-SQL-Injection
This repository does not have a README...
joomla_CVE-2017-8917
joomlaCVE-2017-8917 La "explotación" se realizó únicamente con fines educativos en el contexto del proyecto para la clase de Seguridad del Ciberespacio. Todos los pasos están descritos en el idioma rumano...
laravel-phpunit-rce-masscaner
laravel phpunit rce masscanner CVE-2017-9841 Masscanner for Laravel phpunit RCE CVE-2017-9841 deps root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage root@kitploit: usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help sh...
htattack
htattack.py An exploit implementation for RCE in RTF docs CVE-2017-0199. Video in Spanish: https://www.youtube.com/watch?v=0lDvclMrymM Usage: root@kitploit: python htattack.py -u...
CVE-2017-0106
CVE-2017-0106...