30774 matches found
coldfusion-10-11-xss
ColdFusion 10.x 11.x XSS - RCE PoC Exploits This repo contains XSS vectors for CVE-2015-0345 APSB15-07 that allow for the ability to gain remote command execution on ColdFusion installations. This exploit is only valid for ColdFusion 10 and 11 installations. Specifically, ColdFusion 11, Update 11...
CVE-2015-1397
POC for CVE-2015-1397 Magento SQL Injection. Read more at : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...
uxss-poc
Universal Cross Site Scripting PoC This is a PoC for CVE-2015-0072 for sequentialy get the targeted websites cookies. Disclaimer This Proof of Concept is for educational purpose only. Please do not use it against any system without prior permission. You are responsible for yourself for what you d...
OpenSSL-1_0_1g_CVE-2015-1791
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
cve-2015-5477
cve-2015-5477...
cve-2015-3306
cve-2015-3306 docker image hackarada/cve-2015-3306 Intended for personal use root@kitploit: docker build -t hackarada/cve-2015-3306 docker run --rm -it -p 21:21 -p 80:80 hackarada/cve-2015-3306...
libunwind_CVE-2015-3239_After
-- mode: Outline - - 이것은 unwind 라이브러리 버전 1.0입니다. 이 라이브러리는 여러 아키텍처/운영체제 조합을 지원합니다: Linux/x86-64: 잘 작동합니다. Linux/x86: 잘 작동합니다. Linux/ARM: 잘 작동합니다. Linux/IA-64: 완전히 테스트되었으며 지원됩니다. Linux/PARISC: 잘 작동하지만, C 라이브러리에 unwind 정보가 없습니다. HP-UX/IA-64: 대부분 작동하지만 몇 가지 심각한 제한 사항이 알려져 있습니다. Linux/AArch64: 새로...
Modified-CVE-2015-3306-Exploit
Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...
CVE-2015-2546-Exploit
CVE-2015-2546-Exploit My paper about CVE-2015-2546: http://bobao.360.cn/learning/detail/3184.html My blog:http://whereisk0shl.top...
ExtractKeyMaster
ExtractKeyMaster Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431...
ActiveMQ_CVE-2015-5254
ActiveMQ デシリアライゼーション CVE-2015-5254 脆弱性の説明:Apache ActiveMQ 5.13.0 より前の 5.x バージョンに安全上の脆弱性が存在します。この脆弱性は、プログラムがブローカーでシリアライズ可能なクラスを制限していないことに起因します。リモートの攻撃者は、特別に細工されたシリアライズ化された Java Message Service JMS ObjectMessage オブジェクトを利用して、任意のコードを実行する可能性があります。 影響を受けるバージョン:Apache ActiveMQ 5.13.0 より前の 5.x バージョン 0x01...
CVE-2015-3306-Python-PoC
CVE-2015-3306-Python-PoC これは、OSCPの学習とエクスプロイト開発の演習として、Metasploitモジュールから調整を加えて変換されたものです。元々はsearchsploitでランダムなリモートコマンド実行モジュールを検索したことから来ています。Metasploitのコードを解析し、Pythonに変換しました。 Proof screenshot:...
CVE-2015-8562
This repository does not have a README...
CVE-2015-0568
익스플로잇 CVE-2015-0568에 대한 익스플로잇 링크 codeaurora c0reteam...
FreakVulnChecker
FreakVulnChecker This script check if your list of server is accepting Export cipher suites and could be vulnerable to CVE-2015-0204 Usage root@kitploit: Usage: ./freak.vuln.check.sh The program accept single ip:port or domain syntax or a list of ips or domains. It will output if the Exports ciph...
cve-2015-6612poc-forM
cve-2015-6612 POC for M reported by me and @WenXu from Keen put this under ANDROIDSRCROOT/frameworks/av/media/decrytpoc/ and cd into it && calling mm...
CVE-2015-6637
CVE-2015-6637 PoC by Edward Hung Please backup your device while run PoC https://source.android.com/security/bulletin/2016-01-01.html...
CVE-2015-3636
This repository does not have a README...
CVE-2015-8660
CVE-2015-8660 这个代码包含了CVE-2015-8660漏洞的利用代码,还有注释,出现问题的源代码,打了补丁后的代码 具体代码解释,请查看我的博客 http://blog.csdn.net/enjoy5512/article/details/51155798...
CVE-2015-57115
CVE-2015-57115 CVE-2015-57115 批量检测工具 描述 CVE-2015-57115 检测脚本是一个 Python 工具,用于检测与 CVE-2015-57115 相关的漏洞,该漏洞是某些 PHP 应用程序中的路径遍历漏洞。该脚本通过发送带有精心构造的 payload 的请求来检查多个 URL 是否存在此漏洞。 功能 Payload 检测 :测试各种 payload 以检查路径遍历漏洞。 多线程 :支持并发 URL 检查以加快处理速度。 可配置超时和重试次数 :允许设置请求超时时间和重试次数。 输出文件 :将漏洞检查结果保存到输出文件中。 彩色输出...