110969 matches found
theway
The Way The Way is a tool for unpacking, repacking, and creating malicious Cisco Adaptive Security Device Manager ASDM packages. ASDM is the Java-based administrative GUI for Adaptive Security Appliance ASA systems e.g. firewalls and VPNs. The ASDM package is hosted on the ASA and sub-components...
PoC-ubuntutouch-pin-privesc
UPDATE 09.09.2022 I got new CVE for this vulnerability: CVE-2022-40297. Proof of Concept: Privilege escalation in Ubuntu Touch 16.04 - by Passcode Bruteforce Ubuntu Touch allows you to "protect" devices with a 4-digit passcode. Such a code was set in a demonstration device. The problem is that th...
hook
Hook Hook exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there is a builtin low privileged user named status that this script...
Mandela-Classic
Mandela Rewritten iOS customization app powered by CVE-2022-46689. No jailbreak required. Disclaimer I am not responsible for any damage to your device. Use this app at your own risk. Building instructions root@kitploit: git clone https://github.com/BomberFish/Mandela-Rewritten.git cd Mandela mak...
MSDT_CVE-2022-30190-follina-
MSDTCVE-2022-30190-follina-...
Mandela-Legacy
Warning! This is being phased out in favour of Mandela Rewritten! Please go there for future updates! Mandela iOS customization app powered by CVE-2022-46689. No jailbreak required. Disclaimer I am not responsible for any damage to your device. Use this app at your own risk. Building instructions...
CVE-2022-22947
CVE-2022-22947 root@kitploit: script for exploit Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 root@kitploit: https://github.com/march0s1as/CVE-2022-22947 cd CVE-2022-22947 go build spring.go ./spring -h...
POC-CVE-2022-28117
CVE 2022 28117 PoC Python with slight modifications Usage : python3 .\poccve2022-28117.py -x file:///etc/passwd -u username -p password http://192.168.148.140/navigate...
log4j-scan
log4j-scan Un scanner entièrement automatisé, précis et complet pour trouver des hôtes log4j vulnérables Fonctionnalités Prise en charge des listes d'URL. Fuzzing pour plus de 60 en-têtes de requête HTTP pas seulement 3-4 en-têtes comme dans les outils précédemment vus. Fuzzing pour les paramètre...
MSDT_CVE-2022-30190
MSDTCVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote cod...
CVE-2022-21587-POC
CVE-2022-21587-POC- CVE-2022-21587 POC root@kitploit: file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit root@kitploit: cd slipit python3 setup.py...
Text4shell--Automated-exploit---CVE-2022-42889
Install maven - maven-linux //For automated hacking: 1../install.sh root@kitploit: 2../exploit.sh 3.To remove the application use ./stopapp.sh //For manual hacking: 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell...
CVE-2022-22851
This repository does not have a README...
CVE-2022-1388-EXP
F5 BIG-IP RCE Check check： CVE-2022-1388 F5 BIG-IP RCE Batch Detection exp： Note：exp is modified based on CVE-2021-22986！...
dirtypipe
About: Title: DirtyPipe Description: Exploit for a new Linux vulnerability known as 'Dirty PipeCVE-2022-0847' allows local users to gain root privileges. AUTHOR: drapl0n Version: 1.0 Category: Execution Target: Linux operating systems. Attackmodes: HID, Storage DirtyPipe: Exploit for a new Linux...
lenovo_exec
lenovoexec CVE-2022-3699 with arbitrary kernel code execution capability original exploit: https://github.com/alfarom256/CVE-2022-3699...
Watchguard-RCE-POC-CVE-2022-26318
Watchguard-RCE-POC-CVE-2022-26318 PoC for Watchguard CVE-2022-26318 updated to work with Python3.12 as the ssl.wrapsocket is deprecated. PoC originally from https://github.com/h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318/blob/main/POCwg.py...
CVE-2022-42889-Text4Shell-Docker
CVE-2022-42889-Text4Shell-Docker Dockerized PoC for CVE-2022-42889 Text4Shell...
CVE-2022-34169
Description Checks if CVE-2022-34169 is fixed on your machine. As far as I know, an exploit was found by a Google employee and not published. Since the fix is known, a small test routine was written with this to check whether the fix is available at runtime. Build yourself optional Optional: This...