ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX Struts 2 DefaultActionMapper Interactive Shell Exploit for CVE-2013-225 S2-016 The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with "action:" or "redirect:", followed ...

x-stream__xstream_CVE-2013-7285_1-4-6

XStream root@kitploit: "Java to XML Serialization, and back again" -- Binaries ----------------------------------------------- All binary artifacts are in the 'lib' directory. These include the xstream jars and any other library used at build time, or optional runtime extras. kXML2 is recommend...

rails-exploit-cve-2013-0156

== Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 Bootstrapped a Rails 3.2.10 application with the remote code execution exploit. Ref: https://github.com/ronin-ruby/ronin-ruby.github.com/blob/rails-pocs/blog/posts/2013-01-09-rails-pocs.md === Setup Install gem dependencies and fire up the...

ownCloud_RCE_CVE-2013-0303

This repository does not have a README...

FreeBSD-9.0-9.1-Privilege-Escalation

FreeBSD-9.0-9.1 - Escalada de Privilegios CVE-2013-2171 Por [email protected] ¡Cómo explotarlo! 1° Verifica la versión del kernel root@kitploit: uname -a FreeBSD freebsd 9.0-RELEASE FreeBSD 9.0-RELEASE 0: Tue Jan 3 07:46:30 UTC 2012 2° Transfiere este archivo al objetivo root@kitploit:...

CVE-2013-3827

CVE-2013-3827 Quick PoC checker for common configurations that might be available via directory traversal due to CVE-2013-3827 Usage: 1. Modify the contents of traversal.py to match your needs 2. python3 traversal.py...

Nginx-CVE-2013-4547

Nginx Filename Logic Vulnerability CVE-2013-4547 Vulnerability Description Affected versions: Nginx 0.8.41 1.4.3 / 1.5.0 1.5.7 Reference links: https://vulners.com/cve/CVE-2013-4547 https://blog.werner.wiki/file-resolution-vulnerability-nginx/ http://www.91ri.org/9064.html Vulnerability Descripti...

CVE-2013-2730

CVE-2013-2730...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 This vulnerability has been supplanted by CVE-2013-0333. See https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo for more details. A replacement for this script, covering CVE-2013-0333, can be found at...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...

CosmicRakp

CosmicRakp Table of Contents Introduction CVE-2013-4786 Installation Usage Credits License Introduction CosmicRakp is a powerful tool written in Go that allows red teamers and penetration testers to dump IPMI hashes. This project aims to be efficient, fast, and easy to use. CVE-2013-4786 This too...

ipmitest

ipmitest Shell script for testing the IPMI cipher type zero authentication bypass vulnerability CVE-2013-4784 The IPMI is a standardized computer system interface used by system administrators for out-of-band management of computer systems and monitoring of their operation. It is a way to manage ...

nginxhack

This is a tool that uses an exploit called CVE-2013-2028 to excecute a bind shell on the target server that's running Nginx 1.3.9 or 1.4.0. It can be downloaded here you will need to run it from the command line Usage: nginxhack target target port target bind port...

nginxpwn

Entrenamiento de explotación -- CVE-2013-2028: Desbordamiento de búfer basado en pila de Nginx Este repositorio contiene el código fuente de nginx 1.4.0, así como binarios precompilados con y sin cookies de pila. También hay un Vagrantfile para una configuración sencilla. Anuncio y parche:...

CVE-2013-1965

CVE-2013-1965 A proof of concept exploit for the CVE-2013-1965 vulnerability affecting Apache Struts 2...

Richsploit

Richsploit Richsploit: Exploitation toolkit for RichFaces. Overview Richsploit can be used to exploit JSF endpoints using RichFaces. All versions from 3.1.0 and higher are vulnerable. root@kitploit: usage: Richsploit -e,--exploit 0: CVE-2013-2165 1: CVE-2015-0279 2: CVE-2018-12532 3: CVE-2018-125...

libget_user_exploit

This library read in kernel memory by CVE-2013-6282 exploit...

libmsm_acdb_exploit

Original code is written by @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...

CVE-2013-5842

This repository does not have a README...

WordPress Spreadsheet - Cross-Site Scripting

WordPress Spreadsheet plugin contains a reflected cross-site scripting vulnerability in /dhtmlxspreadsheet/codebase/spreadsheet.php. id: CVE-2013-6281 info: name: WordPress Spreadsheet - Cross-Site Scripting author: random-robbie severity: medium description: | WordPress Spreadsheet plugin contai...