shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage root@kitploit: $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: root@kitploit: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI +...

mangy-beast

Mangy Beast CloudPassage Halo policy for detecting vulnerability to CVE-2014-3566 AKA POODLE for Red Hat hosts running Apache and modssl or modnss and Windows Server 2008 and 2012 server processes only We're not going to rehash the minute details of CVE-2014-3566, otherwise known as POODLE. If...

CVE-2014-91371-Wordpress-

CVE-2014-91371-Wordpress Description root@kitploit: wordpress with Plugin Slider REvolution 4.1.4...

openmagic

openmagic openmagic can assist you in the automating testing and exploiting of systems vulnerable to the OpenSSL TLS heartbeat read overrun CVE-2014-0160. The base module wraps a modified version of the "ssltest.py" program by Jared Stafford and provides the following additional features: Save th...

heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Software from@FiloSottile for iSC Inc...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Weblogic SearchPublicRegistries SSRFCVE-2014-4210 Exploit Script based on Python3 Usage optional arguments: -h, --help show this help message and exit -u U Single Target URL -uf UF Read URLs from file -p P Only scan specified ports -sn SN Only scan specified subnets -sf...

heartbleed-tools

OpenSSL Heartbleed CVE-2014-0160 vulnerability scanner, data miner and RSA key-restore tools. Author: Einar Otto Stangvik / @einaros / https://hacking.ventures Since the cat is long since out of the bag, and others have begun publishing their tools, I'm putting mine out there too. Hopefully this...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

Nessus_CVE-2014-6271_check

NessusCVE-2014-6271check Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: root@kitploit: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in...

vaas-cve-2014-0160

Vulnerability as a Service - CVE 2014-0160 A Debian Wheezy Linux system with a vulnerable version of libssl and openssl and a web server to showcase CVS-2014-0160, a.k.a. Heartbleed. Overview This docker container is based on Debian Jessie and has been modified to use a vulernable version of libs...

heartbleed-checker

heartbleed-checker Check for CVE-2014-0160...

CVE-2014-4210-SSRF-PORTSCANNER-POC

CVE-2014-4210 SSRF PORTSCANNER PoC Author: Aaron Mizrachi unmanarc [email protected] Twitter: https://twitter.com/unmanarc License: LGPLv3 Liability / Legal Disclaimer This project is made for EDUCATIONAL and ETHICAL TESTING purposes ONLY. Using of source code in this repository for attackin...

shellshocker-pocs

Shellshocker - Repository of "Shellshock" Proof of Concept Code Collection of Proof of Concepts and Potential Targets for ShellShocker Wikipedia Link: https://en.wikipedia.org/wiki/Shellshock%28softwarebug%29CVE-2014-7186andCVE-2014-7187Details Please submit a pull request if you have more links ...

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome plugin DEPRECATED Chrome plugin who will look-up if the current site and all subdomains called are vulnerable to CVE-2014-0160. The vulnerability check is done by an API service who's now dead it wasn't in 2014! May the code can be useful to someone anyway, if someone found a ne...

cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS

This check is for demostration only. cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS Targets the OpenSSL product directly on discovered HTTP and HTTPS services. This does not check for OpenSSL 1.0.2-beta which is vulnerable. Also, OpenSSL is commonly packaged into other software and better targeted ...

CVE-2014-0346

CVE-2014-0160 Heartbleed Test Script This script checks for the infamous Heartbleed vulnerability CVE-2014-0160 in SSL/TLS servers. 📜 Credits Based on the original script by Jared Stafford [email protected] Modified and updated by Songül Kızılay for educational and research purposes ⚠️...

patch-openssl-CVE-2014-0160

patch-openssl-CVE-2014-0160 Patch openssl heartbleed with ansible Usage : root@kitploit: pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2014-0160.yml yourinventoryfile just need to contain your server list : root@kitploit: 192.168.0.10 webserver1.example.com...

shellshock

shellshock Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock CVE-2014-6271 & CVE-2014-7169 vulnerabilities in Bash environments. Installation: Clone the repository: git clone https://github.com/ajansha/shellshock.git Navigate to the directory...

heartbleed-proof-of-concept

Heartbleed CVE-2014-0160 Setup You will require docker in order to perform the setup. The exploit, dynamically generates the random bytes from the Client Hello message, therefore you will need to link the library when building the executable. The required package to be installed, in order to link...