109352 matches found
grafana-exploit-CVE-2021-43798
grafana-exploit-CVE-2021-43798 About What is this exploit used for ? used for the Grafana Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798 allows access to local files using directory traversal What grafana versions will this exploit work for? will work for Grafana versions 8.0.0-bet...
log4j_RCE_CVE-2021-44832
Log4j 2.17.0 RCE -- CVE-2021-44832 Reproduction 1. Start the malicious JNDI server root@kitploit: java -jar JNDI-Injection-Exploit-1.0-SNAPSHOT-all.jar -C "/System/Applications/Calculator.app/Contents/MacOS/Calculator" -A "127.0.0.1" 2. Modify the DataSource section in config/log4j2.xml to your...
CVE-2021-42237-SiteCore-XP
CVE-2021-42237-SiteCore-XP Similarly, put the URLs to be detected in target.txt Register and modify the DNSLOG platform yourself...
PrintNightmare
PrintNightmare Here is a project that will help to fight against Windows security breach PrintNightmare! CVE-2021-34527 You have to know that a patch has been released by Microsoft against this breach but is not fully functional and fight only RCE Remote code execution while LPE Local privilege...
exploit_cve-2021-29447
exploitcve-2021-29447 For educational purposes only. This exploit is supposed to be really convenient tool to get any file from server running wordpress 5.6.2 and php8. see https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 All you need is base wp-admin access and ability to...
apache-cve-poc
apache-cve-poc Dockerized Proof-of-Concept of CVE-2021-40438 in Apache 2.4.48...
Proxyshell-Scanner
Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...
CVE-2021-3156
Baron Samedit - Sudo CVE 2021-3156 PoC Written in BASH and C. Written by: TheFlash2k/Ali Taqi Wajid Usage: root@kitploit: This would spawn a root shell directly if the sudo is vulnerable. $ make $ ./exploit...
log4j2-rce-poc
Log4j2 RCE Vulnerability POC A bare minimum proof-of-concept for Log4j2 JNDI Remote-Code-Execution vulnerability CVE-2021-44228. This is intended for educational purposes to help people who are not security researchers to understand how it works and how large the impact is. The POC bypasses the...
CVE-2021-4034
CVE-2021-4034 self contained bash script, just run and pwn! with reference to Qualys' blog post https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...
CVE-2021-21972
Check CVE-2021-21972 CVE-2021-21972 vCenter-6.5-7.0 RCE POC...
checkmk-log4j-scanner
checkmk extension to check for log4j2 CVE-2021-44228 This Plugin wraps around logpresso/CVE-2021-44228-Scanner Apache License 2.0 How it works Run in 5 steps: 1. Find all .jar, .war, .ear, .aar files recursively. 2. Find META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties entry from...
CVE-2021-23017-PoC
CVE-2021-23017-PoC root@kitploit: pip install -r requirements.txt python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to...
apache-httpd-path-traversal-checker
Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...
Log4shell
Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...
CVE-2021-43798-Grafana
CVE-2021-43798 Grafana: Lectura arbitraria de archivos 1. Instalación root@kitploit: pip3 install -r requirements.txt 2. Uso root@kitploit: $ python3 grafana.py -h / | \ \ / / | | | \ / \ | \ / | | || | | / | | / \ | | \ \ / / | | | | | | | | | | | || | | \ / / | | / \ | | \ V / | | || / / | || |...
f5-waf-quick-patch-cve-2021-44228
f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM Quick Patch CVE 2021-44228. Overview This tool connects to a BIG-IP device and creates a custom signature set called CVE-2021-4428 and apply it to all policies in blocking mode. It also enforces all signatures and apply the changes...
CVE-2021-22205
CVE-2021-22205 Pocsuite3 For CVE-2021-22205, Unauthorized RCE...
cpiopwn
cpiopwn CVE-2021-38185 This is an ACE POC of an integer overflow bug in cpio. This exploit bypasses all binary protections except full RELRO. This exploit uses cpio 2.13 and libc 2.31. Video demo: https://youtu.be/F0yKJhu7Vak Running the exploit We've provided a Kali Dockerfile to run the exploit...