93108 matches found
Treck20-Related
Treck20-Related PoC for CVE-2020-11896 Treck TCP/IP stack and device asset investigation Protocol stack inspection As many manufacturers adopt the Treck protocol stack, some manufacturers refer to the Treck protocol stack by way of hardware IP cores. It is not enough to identify vulnerabilities...
CVE-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...
git-lfs-RCE-exploit-CVE-2020-27955
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .bat / powershell version Vulnerable: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken etc. Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Tested on Windows on: git, GitHub...
CVE-2020-7048
CVE-2020-7048 You can watch this video, to reproduce this exploitation https://www.youtube.com/watch?v=wHBhWVP0ryY&feature=youtu.be&abchannel=ElmouradiAmine...
Windows10_Cumulative_Updates_PowerShell
Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...
CTX-CVE-2020-7473
CTX-CVE-2020-7473 Citrix Sharefile Vulnerbility check Fast Research details CTX-CVE-2020-7473 Made on 2020.04.16 Vulnerbility check: Open in a webbrowser https://yoursharefileserver.companyname.com/UploadTest.aspx Or curl https://yoursharefileserver.companyname.com/UploadTest.aspx --path-as-is...
GoF5-CVE-2020-5902
GoF5-CVE-2020-5902 Utilidad Open-Source para validar la vulnerabilidad crítica en F5 BIG-IP Traffic Management User Interface TMUI CVE-2020-5902 hecho en Golang. Demo Windows...
CVE-2020-14645
CVE-2020-14645 Usage First, use NDI-Injection-Exploit to listen and generate an LDAP address. java -jar WeblogicT3.jar -Target 127.0.0.1 -Port 7001 -RMI ldap://127.0.0.1:1389/dozvtq --SSL -Target and -RMI are required. For HTTPS, use the --SSL parameter. -Port defaults to 7001. If compiling from...
CVE-2020-7961-Mass
CVE-2020-7961-Mass CVE-2020–7961 Mass exploit for Script Kiddies Tested on: Kali Linux, Windows,... Requirements: apt install python3 pip3 install requests colorama Usage: python3 rce.py target url | For a single target python3 mass.py list url | For a list target Saved file to: linux.txt, win.tx...
weblogicPoc
weblogicPoc Weblogic Vuln POC EXP cve-2020-2551 cve-2020-2555 cve-2020-2883, ... Patch CVE-2020-2551 Updated original version https://github.com/Y4er/CVE-2020-2551.git to address the issue of being unable to directly probe servers on private addresses. CVE-2020-2555 Updated cve-2020-2555 exp,...
ecp_slap
ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...
CVE-2020-5902
Readme F5 BIG-IP arbitrary file read + remote command execution RCE root@kitploit: +-------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + + CVE-2020-5902 F5 BIG-IP Read File + RCE +...
CVE-2020-17519
CVE-2020-17519...
MiniPlasma-Detection
MiniPlasma Detection CVE-2020-17103 Sigma detection rule for MiniPlasma, a Windows local privilege escalation exploit abusing a race condition in cldflt.sys to hijack the windir environment variable for the SYSTEM account, redirecting the WER QueueReporting scheduled task to execute an attacker...
zerologon
Zerologon test for SMB & RPC A python script based on SecuraBV script. Demonstrates that CVE-2020-1472 can be done via RPC/SMB, and not only over RPC/TCP. Additionaly, there is a random byte in the final client challange & client credential - to test against trivial IDS signatures. The RPC/SMB sc...
CVE-2020-24750
CVE-2020-24750 Result：...
CVE-2020-14882-POC
This repository does not have a README...
ofbiz-poc
ofbiz-poc CVE-2020-9496 and CVE20209496 using dnslog batch vulnerability verification PoC and exp OFBizCVE20209496.py and OFBizCVE202126295.py are for single vulnerability verification ofbizpoc.py is for batch verification of both vulnerabilities, save the websites to be batch-verified to urls.tx...