CVE-2021-3156-without-ip-command

CVE-2021-3156-without-ip-command fork of worawit/CVE-2021-3156 exploitnss.py modified to work with ifconfig instead of the ip command root@kitploit: wget https://github.com/Bad3r/CVE-2021-3156-without-ip-command/raw/refs/heads/main/exploitnss.py or wget https://cdn.unsigned.sh/exploitnss.py...

CVE-2021-3156

This repository does not have a README...

CVE-2021-4034-PwnKit-

CVE-2021-4034-PwnKit- Code to exploit CVE-2021-4034...

Flangvik

Flangvik C POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in…...

htb-wifinetictwo-exploit

CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...

Invoke-HiveNightmare

Invoke-HiveNightmare PowerShell-based PoC for CVE-2021-36934, which enables a standard user to be able to retrieve the SAM, Security, and Software Registry hives in Windows 10 version 1809 or newer. Situation In specific versions of Windows 10, standard users have read/execute rights to files in...

Mass-CVE-2021-3129-Scanner

Mass Scanner for CVE-2021-3129 Laravel Debug RCE Usage root@kitploit: $ bash massCVE-2021-3129scan.sh list.txt...

log4j-log4shell-affected

log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...

Log4j_dos_CVE-2021-45105

Log4j2 DOS CVE-2021-45105 Poc root@kitploit: $$::-$::-$$::-$ Versions Affected: all versions from 2.0-beta9 to 2.16.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45105 It uses Log4j 2.16.0 Running the application Run it: root@kitploit: Import the project in Jav...

Apache-CVEs

Apache-CVEs Exploit created in python3 to exploit known vulnerabilities in Apache web server CVE-2021-41773, CVE-2021-42013 What's apache The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems including UNIX and Windows. The goa...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: root@kitploit: docke...

CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...

CVE-2021-44228-playground

LOG4SHELL-CVE-2021-44228-Validator About This tool allows you to verify whether a simple Java web app is vulnerable to CVE-2021-44228 for a user provided version of Java and of Log4J. You can also optionally apply one of a view pre-defined mitigations. The simulation lab spun up by...

baron-samedit

Baron Samedit PoC Description This is a Proof-of-Concept PoC exploit for the Baron Samedit vulnerability CVE-2021-3156 tested on Ubuntu 20.04 with sudo version 1.8.31 and glibc version 2.31. The exploit leverages a heap-based buffer overflow in sudo's handling of command-line arguments when using...

log4j_scanner

Filesystem log4jscanner for windows and Unix. Scanning for CVE-2021-44228, CVE-2021-45046, CVE-2019-17571, CVE-2021-44832 Requires a minimum of Python 2.7. Can be executed as Custom Script Rule of an Audit or via a Server Script with Server Automation. Also executable standalone from the command...

noPac

About Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC. options: -h, --hel...

CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec YouTube video Watch the ✨ YouTube Video Run locally root@kitploit: make all && ./pwnkit && make clean Run in docker root@kitploit: Build the docker image docker build -t pwnkit . Run the exploit docker run -it pwnkit bash make all && ./pwnkit &&...

omigod-lab

Readme An educational lab VM to learn about the 9.6 CVSS unauthenticated Remote Code Execution RCE vulnerability in Open Management Infrastructure software CVE-2021-38647. Disclosure original research: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure OMI source code:...

CVE-2021-26415

PoC Quick PoC for CVE-2021-26415 as described on https://www.cloaked.pl/2021/04/cve-2021-26415/ The BaitAndSwitch.exe is compiled from https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch...

log4j_scanner_wrapper

Wrapper for scanning Linux directories for log4j vulnerability CVE-2021-44228. Pulling from https://github.com/logpresso/CVE-2021-44228-Scanner. Credit goes here. Scans most suspecting main directories and will exclude nfs mounts. Usage root@kitploit: bash log4jscanner.sh optionaljavapath Written...