remote-bitlocker-encryption-report

remote-bitlocker-encryption-report This PowerShell script takes a list of PC as input, gets their BitLocker encryption type remotely, and outputs the list as a CSV file to help mitigate against CVE-2018-12038. Prevent CVE-2018-12038 vulnerability Description of CVE-2018-12038 from NIST : An issue...

CVE-2018-2893

CVE-2018-2893 Step 1 java -jar ysoserial-cve-2018-2893.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-version-all.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ JRMPClient @mbechler JRMPClient2 @pynerd JRMPClient3 @pynerd...

CVE-2018-7935

CVE-2018-7935 POC grab vaild Session first curl http://192.168.8.1/html/index.html | grep SessionID Instructions: Edit exploit.py , insert grabbed SessionID Vulnerability Status : Acknowledgemnt Recieved & Patch is released...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

Kubernetes-1.12.3-all-auto-install

Kubernetes-1.12.3-all-auto-install Project Introduction Personally organized Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 automatic one-click installation and deployment files for master and node nodes without CVE-2018-1002105 vulnerability, suitable for quick deployment in test and production...

cve-2018-8120

cve-2018-8120 详情见：http://bigric3.blogspot.com/2018/05/cve-2018-8120-analysis-and-exploit.html...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

cve-2018-8174_analysis

Dissecting modern browser exploit: case study of CVE-2018-8174 Overview When this exploit first emerged in the turn of April and May it spiked my interest, since despite heavy obfuscation, the code structure seemed well organized and the vulnerability exploitation code small enough to make analys...

CVE-2018-9995-ModifiedByGwolfs

statement This tool is an improved version of the CVE-2018-9995 wrote by gwolfs,and is for learning use only。Do not use for illegal purposes，all the consequences resulting from this are your own.The orginal version is wrote by ezelf and is on https://github.com/ezelf/CVE-2018-9995dvrcredentials...

CVE-2018-10933

libSSH-Authentication-Bypass Accede a una shell sin credenciales utilizando CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Información sobre CVE-2018-10933 por libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Versión de corrección de errores por libSSH...

CVE-2018-7750

CVE-2018-7750 一种针对CVE-2018-7750的远程命令执行（RCE）方法 Exploit Title: Paramiko 2.4.1 - Remote Code Execution Date: 2018-11-06 Exploit Author: jm33-ng Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz Version: 1.17.6, 1.18.x 1.18.5, 2.0.x...

CVE-2018-20250-WINRAR-ACE-GUI

CVE-2018-20250-WINRAR-ACE-GUI CVE-2018-20250-WINRAR-ACE Exploit with a UI. Original Code : https://github.com/blau72/CVE-2018-20250-WinRAR-ACE...

CVE-2018-6065-exploit

Chrome V8 CVE-2018-6065 Exploit Analysis blog post: https://b1tg.github.io/post/cve-2018-6065-analysis root@kitploit: git reset 0407506af3d9d7e2718be1d8759296165b218fcf --hard gclient sync -f tools/dev/v8gen.py x64.debug ninja -C out.gn/x64.debug tools/dev/v8gen.py x64.release ninja -C...

GPON-LOADER

GPON-LOADER 用于GPON家庭网关设备远程代码执行（CVE-2018-10562）的漏洞利用加载器，支持Payload，使用Python编写。 依赖项 requests 用法 root@kitploit: python gpon-loader.py...

SUF

Buscador de Usuarios SSH v1.4 SSH User Finder es un script para enumerar nombres de usuario SSH explotando CVE-2018-15473. Solo funciona en versiones de OpenSSH menores a 7.7. Enlace al código del exploit: https://www.exploit-db.com/exploits/45939 Dependencias: python, python-argparse,...

CVE-2018-3639-specter-v4-

CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...

CVE-2018-2894

This repository does not have a README...

Test-7-2-0-PHP-CVE-2018-5711

This repository does not have a README...

vmacache_CVE-2018-17182

Exploits Remote & Local Exploits...

CVE-2018-10933

This tool provides the ability to scan and exploit server running vulnerable versions of libssh. vulnerability: https://www.libssh.org/security/advisories/CVE-2018-10933.txt fix: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/ this tool is meant to be used on...