68553 matches found
Strutter
Strutter Prueba de concepto para CVE-2018-11776, viene completa con la capacidad de buscar en la API de Shodan objetivos CVE-2018-11776 Apache Struts versiones 2.3 a 2.3.34 y 2.5 a 2.5.16 sufren de posible Ejecución Remota de Código al usar resultados sin espacio de nombres y al mismo tiempo, sus...
cve-2018-7600
CVE-2018-7600 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-7600 Image author: https://github.com/knqyf263/CVE-2018-7600...
Moodle-CVE-2018-1042
Moodle CVE-2018-1042 Script to exploit CVE-2018-1042 in order to do internal port scans...
CVE-2018-10936
此存储库没有 README。...
CVE-2018-8420
CVE-2018-8420...
domato
Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...
PoC
Leveraging CVE-2018-19788 to dump protected files without root shell CVE-2018-19788 is an issue where any user with a UID over INTMAX IE 4000000000 can run any systemctl command on a systemd linux box, such as Ubuntu. There is already a writeup to gain a root shell found: here. The main differenc...
RTF_11882_0802
RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Patch analysis:...
CVE-2018-6574
CVE-2018-6574...
CVE-2018-11235
CVE-2018-11235 CVE-2018-11235...
m33tfinder
M33tfinder is a tool to detect active conference ID ranges in a Cisco Meeting Server server. M33tbreak is a tool to test weak passcodes against a conference in Cisco Meeting Server server. Pins.txt contains, for example, 4 digits passcodes. This tools are intended to check if the server is...
drupalgeddon2-cve-lab
Laboratorio Drupalgeddon2 CVE-2018-7600 Este repositorio es un paquete de objetivo reutilizable para la ejecución de Drupalgeddon2. Sentinel reprodujo CVE-2018-7600 el 2026-08-27 contra Drupal core 7.57 con SQLite y PHP 7.4. El exploit es la ruta de matriz de renderizado AJAX de dos solicitudes d...
mimipenguin
MimiPenguin 2.0 一种用于从当前 Linux 桌面用户转储登录密码的工具。改编自流行 Windows 工具 mimikatz 背后的思路。此漏洞被分配了 CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781。有趣的是,它在 GNOME Keyring 3.27.2 之后仍未修复,并且在 3.28.0.2-1ubuntu1.18.04.1 中仍然有效。 详细信息 通过转储进程并提取包含明文密码概率较高的行,利用内存中的明文凭据。将尝试通过检查 /etc/shadow...
MoodleExploit
Exploit de Moodle Título del Exploit: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Fecha: 15 Marzo 2019 Autor del Exploit: Darryn Ten Página del proveedor: https://moodle.org Enlace del software: https://github.com/moodle/moodle/archive/v3.4.1.zip Versión: 3.4.1...
Detecting-the-patch-of-CVE-2018-1010
Detección-del-parche-de-CVE-2018-1010 Este código C++ desarrollado en Visual Studio 2017. Este programa funciona con los comandos de cmd. En este programa primero comprobamos la versión de su sistema operativo y, según la notificación de Microsoft, comprueba si ha instalado el parche para la...
CVE-2018-8033
Badges License MIT Installation...
cve-2018-6574
cve-2018-6574...
Android-Passive-Location-Tracker
Android-Passive-Location-Tracker Location tracking app without explicitly asking any location permissions! Makes use of CVE-2018-15835 which makes use of Android OS information leakage through broadcasting intents...
WP-DOS-Exploit-CVE-2018-6389
WP-DOS-Exploit-CVE-2018-6389 Este es un exploit del ataque DoS de Wordpress CVE 2018-6389. USO python3 wp-dosCVE-2018-6389.py domain threads Ejemplo python3 wp-dosCVE-2018-6389.py http://example.com 1000...