cve-2022-22555

This repository does not have a README...

SpringCloudFunction-Research

SpringCloudFunction-Research CVE-2022-22963 research Entorno vulfocus/spring-cloud-function-rce:latest Causa El problema de análisis del parámetro spring.cloud.function.routing-expression en el Request Header provoca un ataque de inyección de Payload. Referencias...

CVE-2022-36804

CVE-2022-36804 You can find a python script to exploit the vulnerability on Bitbucket related CVE-2022-36804. root@kitploit: .,;;. .:lll:. 'clllllc. ,llolllooc' 'loooooooool, .;ooooooooooo;. .:;..;odddddddddo:. 'ldo:. ,llccoddddddc. ,oddddc. .. .:dddddddl' .;dxxxxxxc. .;dxxxxxxo, .:dxxxxxxo'...

Invoke-CVE-2022-22965-SafeCheck

Invoke-CVE-2022-22965-SafeCheck Puerto de PowerShell de la versión original en Python de CVE-2022-22965 por colincowie. Instalación: root@kitploit: iexiwr https://raw.githubusercontent.com/daniel0x00/Invoke-CVE-2022-22965-SafeCheck/main/Invoke-CVE202222965-SafeCheck.ps1 -UseBasicParsing.content...

CVE-2022-26318

This repository does not have a README...

CVE-2022-44149

CVE-2022-44149 This tool helps identify the CVE-2022-44149 vulnerability in routers, allowing researchers and security professionals to test their systems. It includes authentication header generation, payload delivery, and detailed logging for analysis. EN This tool is designed to test the...

Zimbra

Explotación Activa Sobre Zimbra CVE-2022-37042 RCE Unauthenticated La siguiente investigación inicio tratando de entender las POC de varios repositorios en GitHub que compartieron muchos investigadores y termino en una sorpresa interesante, que compartiré en los siguientes parrafos. El 10 de agos...

CVE-2022-24990-POC

CVE-2022-24990-POC Es solo un PoC, no un exploit En Windows use cve-2022-24990.exe En Linux use cve-2022-24990 El uso es muy sencillo: -u Escaneo de un solo objetivo -f Escaneo por lotes -t Número de hilos, por defecto 20...

openssl-1.1.1g_CVE-2022-0778

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas robusto, de calidad comercial, completo y de código...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

Follina-attack-CVE-2022-30190-

Follina-attack-CVE-2022-30190- this is a demo attack of FOLLINA exploit , a vulnerability that has been discovered in May 2022 and stood unpatched until June 2022...

openssl-fuzz

Fuzzing OpenSSL This repository has a companion blog post titled "Finding CVE-2022-3786 openssl with Mayhem" at https://www.seandeaton.com. tl;dr All of this is taken care of for you with the included Dockerfile also on DockerHub. You can run it like so: root@kitploit: Build the container docker...

CVE-2022-0847-DirtyPipe-Container-Breakout

DirtyPipe Container Breakout PoC This repo contains a PoC for the dirtypipe kernel vulnerability, for breaking out of a container. Further explanation can be found in this blog post...

CVE-2022-4262

CVE-2022-4262 Full Analysis including root cause, PoC, exploit and slides of CVE-2022-4262. Disclaimer This repository is intended solely for educational purposes and must not be used for any malicious activities...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-2022-0847 "Dirty Pipe" https://dirtypipe.cm4all.com/ Usage Check current kernel version root@kitploit: ./dpipe.sh Check specific kernel version root@kitploit: ./dpipe.sh 5.10.11...

cve-2022-1388-1veresk

CVE-2022-1388 por 1vere$k CVE-2022-1388 la prueba de concepto. Dos regímenes de trabajo con: URL objetivo simple, el PUERTO predeterminado será 80 si no se menciona; archivo con lista de objetivos : \n\r; Usage root@kitploit: echo...

spring4shell-CVE-2022-22965

POC simple de Spring4Shell Verificar si el endpoint es vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Explotar endpoint vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Ejecutar comando en...

DirtyPipe-CVE-2022-0847

DirtyPipe-CVE-2022-0847 Este repositorio fue desarrollado para analizar y comprender el exploit DirtyPipe CVE-2022-0847 para mi trabajo del tercer año, primer año de sistemas de software seguro. Artículo que escribí El artículo estará disponible después de que termine mi semestre...

ioc-cve-2022-42475

ioc-cve-2022-42475 a simple util that uses ssh to check for the ioc's noted in fortiguard. it uses ssh and runs the commands described on fortinet forum. build git clone the project. this is developed on 1.66.1. build using cargo: root@kitploit: cargo build --release run after building it runs li...

-cve-2022-22947-

-cve-2022-22947- cve-2022-22947 spring cloud gateway batch scanning script usage: python3 springcloudpoc.py ./urls.txt Use urls.txt to store url information URL format: https://xxx.xx.xx/ one per line Original Script Reference:...