Siem-queries-for-CVE-2021-44228

This repository does not have a README...

apache-exploit-CVE-2021-42013

apache-exploit-CVE-2021-42013 Exploit with integrated shodan search Please use it just in educational purpose!...

CVE-2021-26415

PoC Quick PoC for CVE-2021-26415 as described on https://www.cloaked.pl/2021/04/cve-2021-26415/ The BaitAndSwitch.exe is compiled from https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch...

CVE-2021-36934-DLL-Hijacking-DFIR-Investigation

" CVE-2021-36934-DLL-Hijacking-DFIR-Investigation"...

PwnKit-Local-Privilege-Escalation-Vulnerability-Discovered-in-polkit-s-pkexec-CVE-2021-4034

PwnKit-Local-Privilege-Escalation-Vulnerability-Discovered-in-polkit-s-pkexec-CVE-2021-4034- Software Vulnerabilities and mitigation university project, to show exploitation and remediation caused by this vulnerability. We used for this experiment Ubunto version 16.04 LTS, as well and Debian 10.1...

DahuaLoginBypass

DahuaLoginBypass Chrome extension that uses vulnerability CVE-2021-33044 to log in to Dahua IP cameras and VTH/VTO video intercom devices without authentication. For other device types NVR/DVR/XVR, etc, there exists CVE-2021-33045 which cannot be exploited with an ordinary web browser. These...

wordpress_cve-2021-29447

wordpresscve-2021-29447 WordPress XXE vulnerability Credit : https://github.com/motikan2010...

CVE-2022-21882

CVE-2022-21882 win32k LPE bypass CVE-2021-1732 Test only tested on windows 20h2 19042.1415 tested on windows 21H1 not working Download https://raw.githubusercontent.com/David-Honisch/CVE-2022-21882/main/x64/Release/CVE-2021-1732.exe Many thanks to Kalendski. Based on:...

CVE-2021-41773

CVE-2021-41773 A Zeek package which raises notices for Path Traversal/RCE in Apache HTTP Server 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013 References https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-41773 https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-42013...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...

CVE-2021-33766

POC Exploit CVE-2021-33766 ProxyToken POC Exploit for CVE-2021-33766 ProxyToken is a handy shell script which provides pentesters and security researchers a quick and effective way to test Microsoft Exchange ProxyToken vulnerability. Disclaimer This program is for Educational purpose ONLY. Do not...

Log4j-CVE-2021-44228

Log4j-CVE-2021-44228 Mass Check Vulnerable Log4j CVE-2021-44228 Introduction Actually I just checked via Vulnerable Application from https://github.com/christophetd/log4shell-vulnerable-app because I'm lazy to find live target xD so you can develop or change this code according to your knowledge ...

IPFire_2.25_RCE_Authenticated

IPFire 2.25 Remote Code Execution Authenticated - CVE-2021-33393 This exploit is based on CVE-2021-33393 https://nvd.nist.gov/vuln/detail/CVE-2021-33393 and was built upon the original exploit by Mücahit Saratar https://github.com/KaanaryOverFlow/ipfire-2-25-auth-rce, extending it to achieve a...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. AllowOverride none Require all granted Create a Dockerfile in your project FROM httpd:2.4.49 COPY ./httpd.conf...

CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec YouTube video Watch the ✨ YouTube Video Run locally make all && ./pwnkit && make clean Run in docker Build the docker image docker build -t pwnkit . Run the exploit docker run -it pwnkit bash make all && ./pwnkit && make clean Detect using...

log4j2_dos_exploit

Description about author: iAmSoScArEd blog: https://www.cnblogs.com/iAmSoScArEd/ github: https://github.com/iAmSOScArEd/ date: 2021-12-20 log4j2 dos exploit log4j2 dos exploit script CVE-2021-45105 Exploit CVE-2021-45105 exploit script Usage how to use English： Log4j2dos.py -u -m -d -H -l -t...

CVE-2021-41277

CVE-2021-41277 simple program for exploit metabase install gem install httparty gem install colorize gem install timeout ruby CVE.rb...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identify all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228 Will scale to 1,000+ windows servers, 250+ servers at a time. 1k servers took about 1 1/2 hours. Apache log4j CVE-2021-44228 Single Server Version: Single Server...

CVE-2021-40444

CVE-2021-40444 Usage Ensure to run setup.sh first as you will need few directories. Once you have run the script, you should be able to run gen.py with the example given:- Usage python3 gen.py -d document/Sample.docx -p payload/payload.dll -i "http://10.10.10.10" -t html/template.html -c...

CVE-2021-21975

CVE-2021-21975 Nmap script to check vulnerability CVE-2021-21975 Vulnerability References: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html Blog...