coldfusion-10-11-xss

ColdFusion 10.x 11.x XSS - RCE PoC Exploits This repo contains XSS vectors for CVE-2015-0345 APSB15-07 that allow for the ability to gain remote command execution on ColdFusion installations. This exploit is only valid for ColdFusion 10 and 11 installations. Specifically, ColdFusion 11, Update 11...

CVE-2015-1397

POC for CVE-2015-1397 Magento SQL Injection. Read more at : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...

uxss-poc

Universal Cross Site Scripting PoC This is a PoC for CVE-2015-0072 for sequentialy get the targeted websites cookies. Disclaimer This Proof of Concept is for educational purpose only. Please do not use it against any system without prior permission. You are responsible for yourself for what you d...

OpenSSL-1_0_1g_CVE-2015-1791

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

cve-2015-5477

cve-2015-5477...

cve-2015-3306

cve-2015-3306 docker image hackarada/cve-2015-3306 Intended for personal use root@kitploit: docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...

libunwind_CVE-2015-3239_After

-- mode: Outline - - 이것은 unwind 라이브러리 버전 1.0입니다. 이 라이브러리는 여러 아키텍처/운영체제 조합을 지원합니다: Linux/x86-64: 잘 작동합니다. Linux/x86: 잘 작동합니다. Linux/ARM: 잘 작동합니다. Linux/IA-64: 완전히 테스트되었으며 지원됩니다. Linux/PARISC: 잘 작동하지만, C 라이브러리에 unwind 정보가 없습니다. HP-UX/IA-64: 대부분 작동하지만 몇 가지 심각한 제한 사항이 알려져 있습니다. Linux/AArch64: 새로...

Modified-CVE-2015-3306-Exploit

Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...

CVE-2015-2546-Exploit

CVE-2015-2546-Exploit My paper about CVE-2015-2546： http://bobao.360.cn/learning/detail/3184.html My blog：http://whereisk0shl.top...

ExtractKeyMaster

ExtractKeyMaster Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431...

ActiveMQ_CVE-2015-5254

ActiveMQ デシリアライゼーション CVE-2015-5254 脆弱性の説明：Apache ActiveMQ 5.13.0 より前の 5.x バージョンに安全上の脆弱性が存在します。この脆弱性は、プログラムがブローカーでシリアライズ可能なクラスを制限していないことに起因します。リモートの攻撃者は、特別に細工されたシリアライズ化された Java Message Service JMS ObjectMessage オブジェクトを利用して、任意のコードを実行する可能性があります。 影響を受けるバージョン：Apache ActiveMQ 5.13.0 より前の 5.x バージョン 0x01...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC これは、OSCPの学習とエクスプロイト開発の演習として、Metasploitモジュールから調整を加えて変換されたものです。元々はsearchsploitでランダムなリモートコマンド実行モジュールを検索したことから来ています。Metasploitのコードを解析し、Pythonに変換しました。 Proof screenshot:...

CVE-2015-8562

This repository does not have a README...

CVE-2015-0568

익스플로잇 CVE-2015-0568에 대한 익스플로잇 링크 codeaurora c0reteam...

FreakVulnChecker

FreakVulnChecker This script check if your list of server is accepting Export cipher suites and could be vulnerable to CVE-2015-0204 Usage root@kitploit: Usage: ./freak.vuln.check.sh The program accept single ip:port or domain syntax or a list of ips or domains. It will output if the Exports ciph...

cve-2015-6612poc-forM

cve-2015-6612 POC for M reported by me and @WenXu from Keen put this under ANDROIDSRCROOT/frameworks/av/media/decrytpoc/ and cd into it && calling mm...

CVE-2015-6637

CVE-2015-6637 PoC by Edward Hung Please backup your device while run PoC https://source.android.com/security/bulletin/2016-01-01.html...

CVE-2015-3636

This repository does not have a README...

CVE-2015-8660

CVE-2015-8660 这个代码包含了CVE-2015-8660漏洞的利用代码，还有注释，出现问题的源代码，打了补丁后的代码 具体代码解释,请查看我的博客 http://blog.csdn.net/enjoy5512/article/details/51155798...

CVE-2015-57115

CVE-2015-57115 CVE-2015-57115 批量检测工具 描述 CVE-2015-57115 检测脚本是一个 Python 工具，用于检测与 CVE-2015-57115 相关的漏洞，该漏洞是某些 PHP 应用程序中的路径遍历漏洞。该脚本通过发送带有精心构造的 payload 的请求来检查多个 URL 是否存在此漏洞。 功能 Payload 检测 ：测试各种 payload 以检查路径遍历漏洞。 多线程 ：支持并发 URL 检查以加快处理速度。 可配置超时和重试次数 ：允许设置请求超时时间和重试次数。 输出文件 ：将漏洞检查结果保存到输出文件中。 彩色输出...