Heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: root@kitploit: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the...

CVE-2014-5460

This repository does not have a README...

POC-CVE-2014-0166

POC&EXP of CVE-2014-0166 WordPress 3.8.2 cookie forgery vulnerability Details of this vulnerability can be found athere There are three files: wpzerocookiegenerator.php POC to verify this vulnerability. It won't send any requests, just a local brute-forcer. Redefine variables to supply info and i...

bleed

bleed bleed is a tool to test servers for the 'Heartbleed' vulnerability CVE-2014-0160. Usage root@kitploit: $ bleed example.org Connecting... Sending Client Hello Waiting for Server Hello... Sending Heartbeat request Unexpected EOF receiving record header. Server closed connection. No heartbeat...

CVE-2014-6271

CVE-2014-6271...

MaltegoHeartbleed

MaltegoHeartbleed Maltego transform to detect the OpenSSL Heartbleed vulnerability CVE-2014-0160 For more information read the write-up on my blog: http://disk0nn3ct.svbtle.com/maltego-openssl-heartbleed-transform...

CVE-2014-6287

This repository does not have a README...

CVE-2014-8731-PoC

CVE-2014-8731-PoC - PHPMemcachedAdmin Remote Code Execution I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2014-8731-PoC...

HeartBleed-CVE-2014-0160--SCRIPTS-python3

This repository does not have a README...

HeartBleed-Vulnerability-Checker

HeartBleed-Vulnerability-Checker author = 'WaQas-JaMal' Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford [email protected] & The author disclaims copyright to this source code. ''' I have modified this script to take any input url file. Check it for valid tld from provided se...

ShockZaum-CVE-2014-6271

CVE-2014-6271 Script to attack shellshock vulnerability root@kitploit: ! Usage: ./ShockZaum -u 'https://nasa.gov' -c 'rm -rf /' -p '/cgi-bin/aliens.cgi'...

openssl_G2.5_CVE-2014-3570

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2014-5139

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

bash-3.2-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 3.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX.2 shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

OpenSSL_DTLS_CVE_2014_0221

OpenSSLDTLSCVE20140221 OpenSSL DTLS CVE-2014-0221 Denegación Remota ¿Qué es DTLS Datagram Transport Layer Security? Seguridad de la capa de transporte de datagramas. Capa física Soporte de datagramas en la capa TCP: TLS Soporte de datagramas en la capa UDP: DTLS: Maneja el intercambio de claves,...

heartbleeder

Heartbleeder Prueba tus servidores para OpenSSL CVE-2014-0160 también conocido como Heartbleed. ADVERTENCIA : No se ofrecen garantías sobre la precisión de los resultados, y debes verificarlos de forma independiente comprobando tu compilación de OpenSSL. Pull requests welcome. Uso root@kitploit: ...

heartbleeder

Heartbleeder Tests your servers for OpenSSL CVE-2014-0160 aka Heartbleed. WARNING : No guarantees are made about the accuracy of results, and you should verify them independently by checking your OpenSSL build. Pull requests welcome. Usage root@kitploit: $ heartbleeder example.com INSECURE -...

cve-2014-0160-heartbleed

This repository does not have a README...

freePW_tc7200Eploit

This repo contains a PoC iPhone app for CVE : CVE-2014-1677 exploit. The bug/hole was long enough public and a fix should hav been pushed a long time ago. Hopefully this app will make someone bother to push a fix, meanwhile, have fun with this --"...

bash-fix-exploit

bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...