93113 matches found
solarwinds-sunburst-cve-2020-10148
🔍 Vulnerability Research A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance. Purpose: Educational reference and portfolio...
cve-2020-6864
This repository does not have a README...
poc-yaws-cgi-shell-injection
OS command injection in Yaws web server CVE-2020-24916 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:shell-injection-appmod-cgi -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:shell-injection-appmod-cgi root@kitploit: curl...
poc-yaws-dav-xxe
XXE in Yaws web server CVE-2020-24379 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Then run: root@kitploit: curl -i -s -k -X LOCK http://localhost:8000...
DoubleStar
root@kitploit: . . \ \ \ | | | / // | | | \ / \ | | | \ | | / \ \ \ \ \ \ \ \ | \ | | /| \ | |\ / / \ | | / | | / / / / |/ | /|/ \ / / || /|| / / / / / Windows 8.1 IE/Firefox RCE - Sandbox Escape - SYSTEM EoP Exploit Chain | Remote PAC | || ^ | HTTPS RPC/ALPC RPC/ALPC | firefox.exe |...
zerologon
Zerologon Summary A Zeek detection package for CVE-2020-1472, also known as Zerologon, which is a CVSS 10.0 privilege escalation vulnerability against the Netlogon protocol for Windows Server domain controllers. Notices By default, both notices are raised: ZerologonAttempt indicates the requisite...
CVE-2020-15368-AsrDrv103-research
CVE-2020-15368 — AsrDrv103.sys This repository contains my materials related to the reverse engineering of the ASRock AsrDrv103.sys Windows kernel driver associated with CVE-2020-15368. The project was created as a practical study of Windows kernel drivers, driver communication interfaces,...
CVE-2020-7283-McAfee-Total-Protection-MTP-16.0.R26-EoP
CVE-2020-7283 Exploit The write up can be found in the blog of the RedyOps Labs: https://labs.redyops.com/index.php/2020/07/14/mcafee-total-protection-mtp-16-0-r26-escalation-of-privilege-cve-2020-7283/ Third Party Tools This exploit code, is heavily based on symboliclink-testing-tools which was...
-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP
CVE-2020-8103 Exploit The write up can be found in the blog of the RedyOps Labs: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ Third Party Tools This exploit code, is heavily based on symboliclink-testing-tools which was Developed by James...
Hacking-Electron-Apps-CVE-2020-35717-
Hacking-Electron-Apps-CVE-2020-35717-...
CVE-2020-8163
CVE-2020-8163 This is a exploit code for CVE-2020-8163. It's for educational purposes only...
POC_CVE-2020-2883
POCCVE-2020-2883 POC for CVE-2020-2883 Use it with CVE-2020-2555 Server POC v2 OK POC v1+v3 in working...
CVE-2020-14882-GUI-Test
CVE-2020-14882-GUI I have just started learning the Qt framework, so this is a product of learning the Qt development framework. Currently, there are issues such as incomplete echo reception and other problems, for testing purposes only...
CVE-2020-1938
CVE-2020-1938 Scanner for CVE-2020-1938 Scanner? PoC? Call it whatever you want. Just run it directly in a Python environment. Just enter the IP address as prompted. It is recommended to use it after Tomcat is set up. Scanner is a revised script that adds support for multiple IP address inputs an...
CVE-2020-14882
CVE-2020-14882 CVE-2020-14882/14883/14750 USE 1. clone this repo 2. install requests lib 3. python3 14882.py E.G root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator reference https://github.com/jas502n/CVE-2020-14882...
CVE-2020-0796-LPE-POC
CVE-2020-0796-LPE-POC Privilege Escalation POC 64-bit environment...
RDGScanner
Scanner for CVE-2020-0609 & CVE-2020-0610 A proof-of-concept scanner to check an RDP Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610. Tested on: Windows Server 2012 x64 Windows Server 2016 x64 Windows Server 2019 x64 Disclaimer Scanning for memory corruption vulnerabilities is...
CVE-2020-13756-env
CVE-2020-13756 Vulnerable Environment Vulnerable test environment for CVE-2020-13756 - Sabberworm PHP CSS Parser Remote Code Execution. Vulnerability Details...
GitLab-Graphql-CVE-2020-26413
GitLab-Graphql-CVE-2020-26413 GitLab-Graphql-CVE-2020-26413 POC Single verification: python3 GitlabCVE-2020-26413.py -u http://127.0.0.1 Batch verification python3 GitlabCVE-2020-26413.py -f target.txt The vulnerability results will be generated in the current path of the script...