cve-2018-7600

CVE-2018-7600 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-7600 Image author: https://github.com/knqyf263/CVE-2018-7600...

CVE-2018-8587-reproduction

This repository does not have a README...

CVE-2018-1273

CVE-2018-1273 Environment for CVE-2018-1273 CVE-2018-1273: RCE with Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Build root@kitploit: $ docker build -t cve-2018-1273 . Run root@kitploit: $...

Moodle-CVE-2018-1042

Moodle CVE-2018-1042 Script to exploit CVE-2018-1042 in order to do internal port scans...

m33tfinder

M33tfinder is a tool to detect active conference ID ranges in a Cisco Meeting Server server. M33tbreak is a tool to test weak passcodes against a conference in Cisco Meeting Server server. Pins.txt contains, for example, 4 digits passcodes. This tools are intended to check if the server is...

Shiva

Shiva First of all, put Shiva on watch. I will be upgrading it to a full stress testing suite over time. Shiva is designed to perform Denial Of Service DOS attack on wordpress sites by loading all jquery scripts at once through load-scripts.php. So basically its an exploit for CVE-2018-6389...

blogpost_cve-2018-19987-analysis

CVE-2018-19987 D-Link OS command injection analysis Hello there! In this short blog post I'll break down a quick analysis that I performed to better understand the details behind CVE-2018-19987. At the beginning I went after this CVE because I thought that there wasn't any public information or...

CVE-2018-3245

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar root@kitploit: WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933...

SubrionCMS-4.2.1-File-upload-RCE-auth-

SubrionCMS-4.2.1-File-upload-RCE-auth- This is an edited version of the CVE-2018-19422 exploit to fix an small but annoying issue I had. I had to use this exploit in a CTF but I could not get it to properly exploit, just kept failing to login. After an unholy amount of time I finally figured out...

CVE-2018-13379-Fortinet

CVE-2018-13379-Fortinet FortiVuln...

rcm-modchips

RCM Bug "Modchip" Archive This work-in-progress repository collects a variety of sample embedded devices which trigger the "Fusée Gelée"/"ShofEL2" vulnerability CVE-2018-6242. Nothing in this respository is ready for public use...

Bad-Pdf

Bad-Pdf Bad-PDF crea un archivo PDF malicioso para robar hashes NTLM NTLMv1/NTLMv2 de máquinas Windows, utilizando una vulnerabilidad divulgada por el equipo de Checkpoint para crear el archivo PDF malicioso. Bad-Pdf lee los hashes NTLM mediante el receptor Responder. Este método funciona en todo...

labCVE-2018-6574

This repository does not have a README...

CVE-2018-15473_OpenSSH_7.7

CVE-2018-15473OpenSSH7.7...

cve-2018-6574

This repository does not have a README...

bpnd-libssh

bpnd-libssh blueintel bpnd-libssh is a multi-threaded, remote scanner for CVE-2018-10933. Requirements python3 paramiko module Install Example: root@kitploit: apt-get update apt-get install -y libffi-dev libssl-dev pip3 install paramiko Install with docker To build docker container: root@kitploit...

JWT-Bruteforcer

JWT-Bruteforcer Basic Jwt Bruteforcer tool with CVE-2018-1000531 Vulnerability Test Imported libraries: jwt base64 Requires minimum version of python 3.6...

fusee-toy

This repository contains the source code for the fusee-toy project, my basic implementation of CVE-2018-6242 AKA Fusée Gelée, AKA shofel2. It was written in January 2021 to better my knowledge of the vulnerability. This implementation has been built using the fusee-nano and fusee-launcher project...

cve-2018-6574

cve-2018-6574...

SwaggerUI-CVE-2018-25031

Exploit Swagger UI - CVE-2018-25031 Exploit Swagger UI - User Interface UI Misrepresentation of Critical Information CVE-2018-25031. This exploit checks whether the Swagger UI used is susceptible to exploitation of the User Interface UI Misrepresentation of Critical Information vulnerability...