CVE-2020-10199-10204

CVE-2020-10199-10204 http://1984-0day.com python3 poc.py -i 127.0.0.1 -p 8081 -c cookie -csrf csrf-token parse = argparse.ArgumentParser parse.addargument'-i', '--ip', help='ip' parse.addargument'-p', '--port', default='8081', help='port' parse.addargument'-c', '--cookie', help='HTTP cookie'...

zerologon

zerologon zerologon script to exploit CVE-2020-1472 CVSS 10/10 Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. https://github.com/risksense/zerologon To exploit,...

CVE-2020-27194-exp

CVE-2020-27194-exp test...

pulse-secure-vpn-mitm-research

pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process. Alyssa Herrera, Justin Wagner, and Mimir, and...

CVE-2020-11650

FreeNAS DoS CVE-2020-11650 python3 attack.py TargetIP...

SMBGhost_Scanner

SMBGhost Advanced scanner for CVE-2020-0796 - SMBv3 RCE using ollypwn detection technique SMBGhost. It can scan the entire internet using masscan or, a single ip. It can get more informations about targets using Shodan API key required and write results to json file. Otherwise, it will print...

cve-2020-27955

cve-2020-27955 cve-2020-27955...

CVE-2020-8165--Auto-Shell

CVE-2020-8165--Auto-Script...

cve-2020-0796-vuln

comment This depository is for the cve-2020-0796 vulnerability with various canners...

Dubbo-CVE-2020-1948

Apache Dubbo CVE-2020-1948 Test Environment Introduction When this vulnerability first emerged, in order to verify its impact, we searched the internet for many examples compiled by others, but found none that could successfully validate it. So we created one ourselves and put it here for your...

cve-2020-0688

cve-2020-0688 I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that. Modify these inputs before running the file. url = "https://mail.something.com" input 1 command = "cmd /c echo OOOPS!!! c:/truongtn.txt" input2...

nmap_draytek_rce

nmapdraytekrce nmap script to detect CVE-2020-8515 on Draytek Devices...

cve-2020-0601-Perl

cve-2020-0601-Perl This is the Perl language version of the script main.rb published here: https://github.com/ollypwn/CVE-2020-0601...

f5-bigip-rce-cve-2020-5902

F5 BIG-IP RCE CVE-2020-5902 Vulnerability Detection Tool Summary On 20200706, the F5 BIG-IP TMUI RCE vulnerability was disclosed online. The TMUI component Traffic Management User Interface of F5 BIG-IP has an authentication bypass vulnerability. This vulnerability arises from a difference betwee...

CurveBallDetection

CurveBallDetection Resources related to CurveBall CVE-2020-0601 detection. See https://medium.com/zengo/hitting-a-curveball-like-a-pro-129c1dca427c...

POC-2020-8559

POC-2020-8559 Exploit for CVE-2020-8559. We steal all the connections to the kubelet using iptables then rewrite the 101 or 302 responses to 307. The 101s are for modern Kubernetes versions, the 302s are for older ones. We don't have access to the kube-apiserver's x509 cert, so kubelet webhook au...

SAP_CVE-2020-6287_find_mandate

SAPCVE-2020-6287findmandate Checker help to verify created account or find it's mandat The script allows you to check whether the account was created when using the exploit RECON.py or find the mandate of the created account Exploit: https://github.com/chipik/SAPRECON Quick start: chmod +x...

CVE-2020-3187-Scanlist

CVE-2020-3187-Scanlist - Cisco Batch scanning site. Disclaimer: I am not responsible for the use of this tool or any damages, DO NOT USE THIS FOR ILLEGAL PURPOSES. This tool was designed to scan for authorised assets to automate the check for this vulnerability on multiple cisco instances. Instal...

Rick_write_exp_CVE-2020-8835

RickwriteexpCVE-2020-8835...

CVE-2020-1350-Fix

KB4569509: Guidance for DNS Server Vulnerability CVE-2020-1350 Introduction On July 14, 2020, Microsoft released a security update for the issue that is described in CVE-2020-1350 | Windows DNS Server Remote Code Execution Vulnerability. This advisory describes a Critical Remote Code Execution RC...