CVE-2018-15131

Zimbra Collaboration User Enumeration Script CVE-2018-15131 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kitploit: root@kali ./cve-2018-15131-user-enum.py --host...

conti-ransomware-writeup

Conti 勒索软件分析报告 概述 本仓库包含了我对一次针对 Microsoft Exchange 服务器的 Conti 勒索软件入侵 的完整调查和技术分析报告。 分析使用 Splunk 8.2.2 进行，审查了来自 Windows Security、Sysmon 和 IIS 日志源的 28,141 条事件 ，以重建完整的攻击链。 主要发现 发现了 三个被利用的 CVE ： CVE‑2020‑0796 SMBGhost CVE‑2018‑13374 CVE‑2018‑13379 找到了一个用于持久化的 特洛伊化 cmd.exe 。 记录了攻击者在漏洞修复后仍保持访问的技术。 提供了 24...

CVE-2018-2628

CVE-2018-2628 root@kitploit: use: exploit.py 192.168.1.1:7001 exploit.py url.txt 格式： 192.168.31.1:7001 192.168.31.100:7001...

Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3

Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcmsv1.3 BlackCat-CMS-Bundle-v1.3 Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-10821 https://github.com/BlackCatDevelopment/BlackCatCMS/issues/384...

CVE-2018-9958--Exploit

This repository does not have a README...

Detect-CVE-2018-20250

Detect-CVE-2018-20250 This script detects whether a .rar file may have the configuration to exploit CVE-2018-20250. For this detection, the file command and the strings command, which are available in most Linux distributions, are used. Usage ./detectwinrarexploit.sh Payload extraction To extract...

Maldoc-Analysis

Maldoc-Analysis In March 2023, a new sample was identified as malware. The malware originated from files with .xls and .doc extensions and is known as "Bank Slip.xls". The malware's activity is related to vulnerabilities identified as CVE-2017-11882 and CVE-2018-0802...

SSH-account-enumeration-verification-script

SSH-account-enumeration-verification-script SSH 账户枚举验证脚本 CVE-2018-15473...

cve-2018-11776-docker

CVE-2018-11776 Docker container and POC exploit written in Go You can build your own image and run it: root@kitploit: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename Or you just can pull the one I created with love for you: root@kitploit: docker container...

CVE-2018-7422

CVE-2018-7422 nuclei -u http://target:8088 -t cve-2018-7422.yaml...

cve-2018-12895-hotfix

此存储库没有 README。...

Larascript

root@kitploit: | | | | | | / || '| / |/ | / || '|| || ' \ | | | | | | || | | | |\ | | | | || | || | || ,||| ,||/ ||| ||| ./ | || Authors: @pwnedshell & @rsgbengi 📌 What its Larascript? Larascript is a script which take advantage from CVE-2018-15133 and can execute remote commands if a...

wordpress_cve-2018-6389

wordpresscve-2018-6389 Tries to exploit a WordPress vulnerability CVE-2018-6389 which can be used to cause a Denial of Service. WARNING: This software does not perform DoS on vulnerable targets; it executes one HTTP GET call only to check if the vulnerability is present. This software is written ...

cve-2018-6389-php-patcher

cve-2018-6389-php-patcher 使用PHP修补WordPress DOS漏洞（CVE-2018-6389）。 1. 将 patcher.php 放置在 WordPress 根目录 2. 访问 yourwordpress.com/patcher.php 3. 删除 patcher.php 来源：https://www.securemydata.fr/patch-de-la-faille-cve-2018-6389-dos-wordpress/...

CVE-2018-17552

CVE-2018-17552 View doc here https://docs.google.com/document/d/1Enu58910099gFJ24AGkOtnJoQgtAibm2/edit?usp=sharing&ouid=116617095858459545855&rtpof=true&sd=true...

Drupal-Exploit-Lab

Drupal-Exploit-Lab Demonstration on exploitation on Drupal 7.57 CVE-2018-7600 with and without WAFWeb Application Firewall Description The project shows how the exploitation of Drupal 7.57 looks like in two different scenarios: 1. Unprotected server → successful exploitation with Metasploit and...

enumpossible

enumpossible Checks a list of SSH servers for password-based auth availability and for the existence of SSH user enumeration vulnerability CVE-2018-15473 in those identified. Uses a slightly modified version of https://www.exploit-db.com/exploits/45939 by @LeapSecurity to check for CVE-2018-15473...

CVE-2018-15473

Updating exploit from python 2 to python 3. Please only use ethically :...

FortiOS-Credentials-Disclosure

FortiOS-Credentials-Disclosure CVE-2018-13379 Exploit Usage : python CVE-2018-13379.py list.txt...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Docker Ngrok Configuration CVE-2018-11235-Git PoC and tunneling with docker ngrok Build Dockerfile root@kitploit: $ docker build -t cve-2018-11235 . Create custom network for ngrok root@kitploit: $ docker network create myngroknet Start Git Http Server...