goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A recent bug in Goahead Webserver was discovered by William Bowling which leads to RCE on the exploited server. The issue exists prior to version 5.1.5 which, according to Shodan covers around 2.8mio servers on the internet. A CVS is available n...

log4j-vul

log4j-vul This project is just to show Apache Log4j2 Vulnerability - aka CVE-2021-44228 Java: java version "1.8.0121" Compile: from src folder javac -classpath .;..\lib\log4j-api-2.1.jar;..\lib\log4j-core-2.1.jar com\example\Log4jVul.java Execute\Run: from src folder java -classpath...

cve-2021-44228

cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...

cve-2021-24499

This repository does not have a README...

CVE-2021-4034

CVE-2021-4034 Мои исследования о CVE-2021-4034...

ExchangeSSRFtoRCEExploit

Exchange SSRF toRCE Exploit ⚠️For educational and learning purposes only CVE-2021-26855 CVE-2021-27065 Usage root@kitploit: ProxyLogon-Exchange SSRF to RCE Exploit Chain. - Author @Evilash ./ExchangeSSRFtoRCEChainExploit.py Real and stable exploit to RCE , enjoy it : Fofa Quary root@kitploit:...

packages_apps_PackageInstaller_AOSP10_r33_CVE-2021-0302

This repository does not have a README...

log4j2-CVE-2021-44228

Sample Log4j2 vulnerable application CVE-2021-44228 Versions Affected: all versions from 2.0-beta9 to 2.14.1 This application is based on Spring Boot web application vulnerable to CVE-2021-44228 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it:...

CVE-2021-41182-Tester

이 저장소에는 README가 없습니다...

CVE-2021-3156-Mitigation-ShellScript-Build

CVE-2021-3156-Mitigation-ShellScript-Build Considering the Vulnerability focused in SUDO 2021 in CVE-2021-3156 this is an attempt to craete a script for process checker and if teh designated process exists then it invokes authenticationa and locks out system...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. root@kitploit: AllowOverride none Require all granted Create a Dockerfile in your project root@kitploit: FROM httpd:2.4.49...

org.shaneking.demo.cve.y2021.s44228

org.shaneking.demo.cve.y2021.s44228 CVE-2021-44228...

CVE-2021-26855-SSRF

CVE-2021-26855-SSRF-Poc 이 스크립트는 CVE-2021-26855 SSRF PoC를 탐지하는 데 도움이 됩니다. 참조: https://proxylogon.com/ 스크립트 사용법 python CVE-2021-26855.py -H target.com -B xxxxxxxxxxxxxxxxxx.burpcollaborator.net HTTPS 요청을 통해 토큰을 획득할 수 있다면 대상은 취약합니다. 그렇지 않으면 오탐입니다. 다음 헤더를 확인하세요. X-SourceCafeServer: X-CommonAccessToke...

SharpPN

C PrintNightmare CVE-2021-1675 Вам понадобится DLL для использования SharpPN. Как только она у вас есть, просто соберите и укажите путь к DLL в аргументах командной строки. Сборка Вы можете собрать самостоятельно с помощью C:\Windows\Microsoft.NET\Framework64\v3.5\csc.exe -out:SharpPN.exe...

log4shell-mitigation

Детали и стратегия смягчения последствий уязвимости RCE в log4j2 Дополнительные сведения смотрите в этом видео на YouTube. https://youtu.be/jqWdwTeGRK0 Это краткая публикация о смягчении последствий уязвимости безопасности CVE-2021-44228, также известной как Log4Shell и LogJam, обнаруженной в...

msgpack-CVE-2021-23410-test

Test for https://snyk.io/vuln/SNYK-JS-MSGPACK-1296122 This looks like not vulerbility. root@kitploit: var assert = require'assert'; var msgpack = require'msgpack'; function sleepms return new Promiseresolve = setTimeoutresolve, ms; ; async function init var normal = "a": 1, "b": 2, "c": 1, 2, 3 ;...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2021-42292

CVE-2021-42292 This package will detect exploits of CVE-2021-42292, a Microsoft Excel local privilege escalation vulnerability, and generate a notice in notice.log for it. https://corelight.com/blog/detecting-cve-2021-42292 Detection Method: This package detects the vulnerability when the...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE 도구는 공유 및 교류 목적으로만 제공됩니다. 무단 테스트에 사용하지 마십시오. 이로 인한 책임은 작성자와 무관합니다. root@kitploit: -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string reverse shell host -m string Method for...

Log4JHunt

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: root@kitploit: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author:...