system_bt_AOSP10_r33_CVE-2022-20229

Stack Bluetooth Fluoride Compilazione ed esecuzione su AOSP È sufficiente compilare AOSP: Fluoride è presente per impostazione predefinita. Compilazione ed esecuzione su Linux Istruzioni per Ubuntu, testate su 14.04 con Clang 3.5.0 e 16.10 con Clang 3.8.0 Scaricare i sorgenti root@kitploit: mkdir...

Dirty-Pipe-Oneshot

Dirty-Pipe-Oneshot Versione compilata di CVE-2022-0847 aka Dirty Pipe. Un solo colpo per diventare root :D basta compilare il file cve-2022-0847.c root@kitploit: gcc cve-2022-0847.c -o getroot poi eseguilo sulla vittima e diventa root :D root@kitploit: ./getroot /etc/passwd 1 ootz: Buon Rooting 🎭...

CVE-2022-26134

pip3 install -r requirements.txt uso: python3 exp.py url "cmd" esempio: python3 exp.py http://192.168.1.1/ whoami...

gotigate

gotigate Explorar CVE-2022-40684 Instalação root@kitploit: ▶ go install github.com/gustavorobertux/gotigate@latest Uso Básico root@kitploit: ▶ gotigate TARGET IP or youraddress.com "height":1, "interface":"", "csf-device":"", "table-visualization":"", "device-list-online":"",...

follina_cve_2022-30190

follinacve2022-30190 Una prova di concetto per CVE-2022-30190 follina. root@kitploit: usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host HOST...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Compilazione cloniamo il repository, compiliamo e avviamo il contenitore root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc...

CVE-2022-39197

CVE-2022-39197 RCE POC Referenzlinks https://mp.weixin.qq.com/s/Eb0pQ-1ebLSKPUFC7zS6dg — Es gibt eine großartige ausführliche Analyse dieser Sicherheitslücke https://www.agarri.fr/blog/archives/2012/05/11/svgfilesandjavacodeexecution/index.html...

CVE-2022-0847-Dirty-Pipe

CVE-2022-0847 Dirty Pipe Vorkompilierte Exploit für CVE-2022-0847 Dirty Pipe. Original-Quellcode von haxx.in/dirtypipe. Bauen root@kitploit: make glibc statische Build make zig-musl-static ZIGTARGET=x8664-linux-musl musl statische Build Herunterladen Laden Sie vorkompilierte Binärdateien von...

frameworks_base_AOSP10_r33_CVE-2022-20007

Questo repository non contiene un README...

text4shell-CVE-2022-42889

Questo repository non contiene un README...

CVE-2022-26318

Questo repository non contiene un README...

CVE-2022-4543-EntryBleed

Questo repository non contiene un README...

text4shell-exploit

Text4shell-Exploit Dies ist ein Proof of Concept, der die Schwachstelle in Apache Commons Text CVE-2022-42889 ausnutzt. Verwundbare Versionen : 1.5.0 bis ausschließlich 1.10.0 Auswirkungen Eine erfolgreiche Ausnutzung dieser Schwachstelle ermöglicht es einem nicht authentifizierten Angreifer,...

spring-rce-poc

spring-rce-poc Test di CVE-2022-22968 Semplice applicazione vulnerabile a CVE-2022-22968 Dockerfile può essere utilizzato per crearla su una versione vulnerabile di Tomcat 9.0.59 exploit.sh è uno script shell che tenta di sfruttare questa CVE sulla porta 8080 di localhost Se l'attacco con...

spring-rec-demo

spring-rec-demo Il codice demo che mostra la recente RCE Spring4Shell CVE-2022-22965 spiegata nel blog tecnico di Datawiza: https://www.datawiza.com/blog/technical/understanding-spring4shell-rce-from-an-engineers-perspective/...

RaspAP 2.8.7 - Unauthenticated Command Injection

A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfgid parameter in /ajax/openvpn/activateovpncfg.php and /ajax/openvpn/delovpncfg.php. id: CVE-2022-39986 info: name: RaspAP 2.8.7 - Unauthenticated Command Injectio...

Sophos Firewall <=18.5 MR3 - Remote Code Execution

Sophos Firewall version v18.5 MR3 and older contains an authentication bypass vulnerability in the User Portal and Webadmin which could allow a remote attacker to execute code. id: CVE-2022-1040 info: name: Sophos Firewall =18.5 MR4 to mitigate this vulnerability. reference: -...

FLIR AX8 1.46.16 - Remote Command Injection

FLIR AX8 version 1.46.16 and below is susceptible to an unauthenticated remote command injection vulnerability.The vulnerability exists in the alarm functionality where user-supplied input in the 'id' parameter is not properly sanitized,allowing attackers to inject and execute arbitrary OS...

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Laboratorio Docker per CVE-2022-42889 Puoi costruire l'immagine Docker localmente oppure scaricare l'immagine da Docker Hub ed eseguire il contenitore. Clona il repository root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Costruisci...

CVE-2022-1162

CVE-2022-1162 Uno strumento per il takeover di GitLab Un semplice strumento per enumerare gli utenti in GitLab e accedere utilizzando CVE-2022-1162 Google Dork intitle:"Sign in · GitLab" Comando python code.py https://url.com Le pull request sono benvenute!...