53 matches found
cms-made-simple-python3
CMS Made Simple – Exploitation Toolkit A collection of scripts, notes, and Python3–ready exploits for CMS Made Simple CMSMS , including the famous Unauthenticated Time-Based SQL Injection – CVE-2019-9053. This repository is created and maintained by Encrypticle Jagdeep Singh as part of my...
CVE-2019-9053
This repository does not have a README...
CVE-2019-9053
CVE-2019-9053 — CMS Made Simple SQL Injection Python 3 A Python 3 port of the time-based blind SQL injection exploit targeting CMS Made Simple = 2.2.9. Original exploit by Daniele Scanu @ Certimeter Group. Vulnerability Field| Detail ---|--- CVE| CVE-2019-9053 Affected Software| CMS Made Simple =...
CTF-CVE-2019-9053-GTFOBins
CTF, CVE-2019-9053, GTFOBins I utilized the machines on https://tryhackme.com/ and my own Kali on WSL to do this exercise and it is part of the CTF challenge. The following information helped me solved the challenge: vim on https://gtfobins.github.io/gtfobins/vim/ and https://gtfobins.github.io/...
CVE-2019-9053-exploit
CVE-2019-9053-exploit working exploit for CVE-2019-9053 I edited oryginal exploit and now its working well. Oryginal exploit had some problems like missing syntax. Usage: Example usage no cracking password: exploit.py -u http://target-uri Example usage with cracking password: exploit.py -u...
mysqli
MySQLi.py - Time-Based Blind SQL Injection for MySQL MySQLi.py is a personal practice project, inspired by Exploit-DB exploit 46635, used during the SimpleCTF room on TryHackMe. What caught my attention in the original exploit was its ability to extract credentials and even crack the password has...
cmsms-sqli
CMS Made Simple = 2.2.9 SQL Injection CVE-2019-9053 - Python3 Exploit Pure Python3 port of the original Exploit-DB 46635 by Daniele Scanu. Time-based blind SQLi to dump admin credentials from vulnerable CMS Made Simple installations. 🎯 Features: ✅ No external dependencies only requests ✅ Python...
CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053-
CMS Made Simple = 2.2.9 SQL Injection Exploit CVE-2019-9053 📌 Description This exploit targets an unauthenticated SQL injection vulnerability in CMS Made Simple = 2.2.9 CVE-2019-9053. The vulnerability allows attackers to extract sensitive information such as username, email, password hash, and...
CVE-2019-9053
CVE-2019-9053...
CMS-Made-Simple-2.2.10---SQL-Injection
CMS-Made-Simple-2.2.10---SQL-Injection Google Dorks for detecting CMS Made Simple 2.2.10 SQL Injection CVE-2019-9053. Built for security auditing and patch verification...
Simple-CTF-Writeup
Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection CVE-2019-9053, credential recovery, SSH access, privilege escalation via Vim, and root compromise. TryHackMe - Simple CTF Writeup A complete walkthrough of the Simple CTF room on...
CVE-2019-9053
CVE-2019-9053 CVE-2019-9053 Exploit for Python 3 Last tested: 28-12-2021 Tested on: Python 3.10.1 Original Exploit Source: https://www.exploit-db.com/exploits/46635 Users take full responsibility for any actions performed using this tool. If these terms are not acceptable to you, then do not use...
SimpleCTF-UpdatedExploit
CMS Made Simple = 2.2.10 SQL Injection Exploit Overview This Python script exploits an unauthenticated SQL injection vulnerability in CMS Made Simple = 2.2.10 CVE-2019-9053. The exploit extracts sensitive information such as the salt, username, email, and password of the administrator from the CM...
CMS-made-simple-sqli-python3
CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - SQL Injection rewritten for python3, CVE-2019-9053 I found it problematic to run this exploit on kali linux, since python2 doesn't have termcolor, so with very few brackets I made it working with python3. All credit goes to:...
CMS-Made-Simple-2.2.9-CVE-2019-9053
CMS-Made-Simple-2.2.9 - SQL-Injection-Exploit - CVE-2019-9053 Description This repository contains an exploit for an unauthenticated SQL injection vulnerability in CMS Made Simple versions 2.2.9 and earlier. This vulnerability, identified under CVE-2019-9053 , allows an attacker to retrieve...
-exploit-lab
-exploit-lab Exploits Python cve-2019-0708 – by HackHeart 🧠 Code Review & Porting - Python 2 → Python 3 This exploit was originally written in Python 2, which is no longer supported by modern systems. To ensure compatibility and maintain future-proof tooling, the entire codebase has been carefull...
CVE-2019-9053
CVE-2019-9053 💻 -h3x0v3rl0rd-...
CVE-2019-9053-Exploit-in-Python-3
CVE-2019-9053-Exploit-in-Python-3 This is an exploit used in TryHackMe's EasyCTF However the code that is installed within Kali Linux or going to exploitDB has outdated Python 2 code. This is a rewrite of that, and some revisions were made when cracking the password's hash, since there was a bug...
CVE-2019-9053
CVE-2019-9053 Original post can be found here Tested on Python 3.11 I don't take any responsibility for missuse or unauthorized use of this script. Check out the blog post for more information about this script Requirements pip3 install httpx...