3017 matches found
bing-ip2hosts
Bing-ip2hosts Bing-ip2hosts ist ein Web-Scraper für Bing.com, um Hostnamen anhand einer IP-Adresse zu entdecken. Beschreibung Bing-ip2hosts ist ein Web-Scraper für Bing.com, der Hostnamen anhand einer IP-Adresse ermittelt. Bing ist die führende Suchmaschine von Microsoft, früher bekannt als MSN...
CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE
RaspAP Hunter RaspAP Hunter è uno script Bash progettato per scansionare installazioni RaspAP e testarle per una specifica vulnerabilità, la CVE-2022-39986. root@kitploit: / \ / | / \ / // // // // \ / /| | / // / / , // // / / // // | / / // || ,//// ./// ||// // author: mind2hex / / / / / / / /...
mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
Summary mcp-shell ships a default Docker configuration security.yaml that includes /bin/bash in the allowedexecutables allowlist. The command validator security.go only checks whether the first token of the supplied command matches an allowed executable; it does not inspect or reject shell...
CVE-2026-55581 mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowedexecutables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell...
EUVD-2026-65549
mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, the default Docker security.yaml includes /bin/bash in allowedexecutables, while security.go validates only the first token and checkBlockedPatternsAndCommands does not reject the shell...
Shellbash-CVE-2014-6271
Shellshock - Iniezione di comandi remota CVE-2014-6271 Versione cinese Costruisci ed esegui l'ambiente vulnerabile： root@kitploit: docker-compose build docker-compose up -d Quando visiti http://your-ip/ dovresti vedere due file: safe.cgi victim.cgi safe.cgi è generato dall'ultima versione di bash...
log4j-scanner
log4j-scanner Controlla la vulnerabilità CVE-2021-44228 Questo test non è affidabile al 100%, ma aiuta con una scansione rapida Come usare: root@kitploit: wget https://raw.githubusercontent.com/codiobert/log4j-scanner/main/log4j-scanner.sh -q -O - |bash...
shellshocker-python
shellshocker-python यह एक Python एप्लिकेशन है जो आपको यह पता लगाने में मदद करता है कि आपकी मशीन जो Bash चलाती है, CVE-2014-6271 के प्रति असुरक्षित है या नहीं।...
Exploits_CVE-2019-19781
Exploit di Remote Code Execution CVE-2019-19781 - Citrix Application Delivery Controller e Gateway Exploit di Remote Code Execution per Citrix Application Delivery Controller e Citrix Gateway CVE-2019-19781 Utilizzo: bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE es: bash...
bash-tls-reneg-attack
bash-tls-reneg-attack Ein Bash-Skript, das versucht, einen Server mit TLS-Neuverhandlungen zu überfluten, indem es den OpenSSL-Client verwendet. Siehe CVE-2011-1473 und CVE-2011-1473 für Details. Verwendung: ./tls-reneg.sh some.hostname.here:port...
CVE-2021-4034
CVE-2021-4034 Script bash autonomo, basta eseguirlo e pwn! con riferimento al post del blog di Qualys https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...
Identificador-CVE-2018-11759
Andere Sprache git - pt-BR Überprüfen Sie, ob Ihre Instanzen die CVE 2018-11759 offenlegen Die Datei main ist ein Bash-Skript zur Ausnutzung. Die URLs müssen das Protokoll und die vollständige Adresse verwenden, Beispiel: https://test.site.com.br Für mehrere URLs in einer Abfrage kann das...
springhound
springhound Creato dopo il rilascio di CVE-2022-22965 e CVE-2022-22963. Script Bash che rileva le occorrenze di Spring Framework nei tuoi progetti e sistemi, consentendoti di ottenere informazioni sulle versioni utilizzate. Estrae i file JAR e analizza i loro file Manifest. Utilizzo:...
CVE-2025-24893
CVE-2025-24893 Script POC in Bash per la vulnerabilità RCE nella piattaforma XWiki Esempio di utilizzo: Configura un listener netcat: root@kitploit: $ nc -nvlp Quindi esegui lo script: root@kitploit: $ chmod +x cve.sh $ ./cve.sh Versioni interessate: Da 5.4 fino a 15.10.11 Da 16.0.0 fino a 16.4.1...
CVE-2021-41773
CVE-2021-41773 Ein einfaches bash POC-Skript für die Path Traversal & RCE-Sicherheitslücke in Apache 2.4.49 Beispielverwendung: Richten Sie einen netcat-Listener ein: root@kitploit: $ nc -nvlp Führen Sie dann das Skript aus: root@kitploit: $ ./exploit.sh Haftungsausschluss Dieses Tool dient nur z...
CVE-2024-26581-Checker
CVE-2024-26581 BGN Internal के लिए भेद्यता जाँचकर्ता आवश्यकताएँ Bash. Wget. स्थापना सुनिश्चित करें कि टूल को /opt/ निर्देशिका में डाउनलोड और रखा गया है। कमांड चलाकर टूल का स्रोत कोड डाउनलोड करें: sudo wget https://raw.githubusercontent.com/madfxr/CVE-2024-26581-Checker/main/CVE-2024-26581.sh और...
Bash-Script-CVE-2018-16763
Dieses Repository hat keine README-Datei...
bash-up
bash-up uno script automatico per correggere la vulnerabilità bash CVE-2014-6271...
Log4j-Scanner-Exploit
Log4Shell Scanner Exploit Script in bash che permette di identificare e/o sfruttare la vulnerabilità Log4shell in remoto. Questo strumento esegue diversi test utilizzando payload LDAP e header X-Api-Version, User-Agent e X-Forwarded-For. Utilizzare sempre questo script con autorizzazione preventi...