140314 matches found
SQLPad-6.10.0-Exploit-CVE-2022-0944
SQLPad 6.10.0 Exploit CVE-2022-0944 This Bash script exploits an RCE vulnerability in SQLPad 6.10.0, allowing an attacker to achieve remote code execution RCE by abusing the host and database fields in SQLPad’s MySQL database connection settings. The exploit leverages SQLPad’s unsanitized handlin...
RCE-Cacti-1.2.22
RCE-Cacti-1.2.22 This is exploit code for CVE-2022-46169, which I recreated using Python3! If you are working on an HTB machine, this might be useful... 🤞✨...
linux-4.19.72_CVE-2022-30594
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
BLACKHAT_USA2022
BLACKHATUSA2022 Just About BLACKHAT USA2022 PDF Public Download in release or this mirror File List, Search what your intersting. root@kitploit: ├── BLACKHATUSA2022 │ ├── Taking Kerberos To The Next Level.pdf │ ├── US-22-ABDELLATIF-Unlimited-Results-Breaking-Firmware-Encryption.pdf │ ├──...
vankyo-s30-bootloader-unlock
Spreadtrum firmware dumper 使用官方SPRD U2S Diag驱动程序或LibUSB驱动程序。 Windows预构建程序下载 Release|Dev 原作者ilyakurdyukov版本的说明信息 使用方法 root@kitploit: spddump 选项 指令 退出指令 示例 单行模式 root@kitploit: spddump --wait 300 fdl /path/to/fdl1 fdl1addr fdl /path/to/fdl2 fdl2addr exec path savepath r all reset 交互模式 root@kitploit:...
CVE-2022-25020
This repository does not have a README...
reproducer-poc-CVE-2022-0847
CVE-2022-0847（脏管道）的朴素检测器与复现工具。 使用系统调用序列/程序的简单生成器，基于刻意受限的构建块/输入值集（仅生成，无高级模糊测试；无变异；无覆盖率引导；无缩减/最小化），并通过对比每个操作在模型和真实内核上的返回值来检测异常行为（基于模型的差异模糊测试）。 免责声明：代码中使用了大量魔数/技巧/内置值作为构建块，以能够生成触发最小化PoC。 因此，它并不真正（仅部分）代表真实情况下通过正确参数生成正确系统调用序列的典型做法。 在巨大的可能状态空间中，对所有参数进行无引导生成可能耗时过长。 我尝试用字符串"MAGIC...
CVE-2022-29856-PoC
CVE-2022-29856-PoC PoC mínimo para CVE-2022-29856 Créditos: https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...
CVE-2022-26138
CVE-2022-26138 CVE-2022-23131 - SAML SSO bypass root@kitploit: fofa: iconhash="-305179312"...
CVE-2022-21340
CVE-2022-21340 PoC for CVE-2022-21340...
Atlassian-CVE-2022-26134
This repository does not have a README...
xwiki__xwiki-commons_CVE-2022-24897_12-6-6
XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...
CVE-2022-22963-Poc-Bearcules
CVE-2022-22963-Poc-Bearcules This is a POC for CVE-2022-22963 I wrote this in bash. I am new to Scripting and this is my first Script Disclaimer I am not Responsible for any miss use or abuse when using this POC . for learning and educational purposes only Thank You...
aws__aws-sdk-java_CVE-2022-31159_1-12-2600
AWS SDK for Java The AWS SDK for Java enables Java developers to easily work with Amazon Web Services and build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. See the AWS SDK for Java 2.x for how to get started. In Maintenance Mode as of July 31, 2024 The AWS SDK fo...
CVE-2022-0847-DirtyPipe-Exploits
CVE-2022-0847-DirtyPipe-漏洞利用工具集 一套为渗透测试人员和红队提供的漏洞利用工具和文档，用于协助利用 Linux Dirty Pipe 漏洞。 关于漏洞 Dirty Pipe CVE-2022-0847 是 Linux 内核中的一个本地提权漏洞，可能允许非特权用户执行以下操作： 修改/覆盖任意只读文件，如 /etc/passwd。 获得一个高权限 shell。 受影响版本 Linux 内核版本高于 5.8 的版本受影响。 目前该漏洞已在以下 Linux 内核版本中修复： 5.16.11 5.15.25 5.10.102...
golang-webmin-CVE-2022-0824-revshell
golang-webmin-CVE-2022-0824-revshell RCE in Webmin target url c - creds for webmin sl - your local server IP and port to host your payload s - callback ip p - callback port References https://www.webmin.com/security.html https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/...
refreshing-soap-exploit
This is a proof of concept for CVE-2022-41622, which is a CSRF in F5 Big-IP that leads to remote code execution. Using this is a bit finnicky, but I'll walk you through my favourite usecases. The vulnerability The core vulnerability is a cross-site request forgery in F5 Big-IP's SOAP interface,...
CVE-2022-42889
Quickstart root@kitploit: sudo apt install golang To run like Python: root@kitploit: go run main.go arg1 arg2 To build executable: root@kitploit: go build main.go Usage: root@kitploit: non@woa:/program$ go run main.go - Usage: ./program vulnerable/web?param= 'ls -la' To Do: Reverse shell...