CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability Vulnerbility Overview Netwrix Account Lockout Examiner ALE before 5.1 allows an unauthenticated, remote adversary to trigger a connection to an attacker-controlled system and capture the...

DVR_Sploit

DVRSploit Simple python3 script to automate CVE-2018-9995 Requirements: requests pip install requests Usage: root@fuckmachine: python3 dvrsploit.py Enter DVR host: 192.168.69.69 Enter DVR port: 88 Device list:...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: $ curl...

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell Script functions to either send or save calendar NTLM leakage using the ReminderSoundFile option. Run script to load the functions in Powershell, then you can use the examples below as a starting point for using the functions. Requires to be run on a Windows machine...

-CVE-2019-9053

CVE-2019-9053 This repository contains the corrected code for CVE: 2019-9053 How to use this? Inside the terminal you can deploy this by python3 exploit2019.py this will ask you to add the URL etc.. after it starts running u can follow those steps to run it and get the Username and Password...

MoxaPass

This is a sample exploit for CVE-2016-9361. It retrieves the SNMP community string and 'admin' password for many kinds of Moxa device. It uses Moxa's UDP/4800 proprietary management protocol. The protocol lacks security, and using the 'unlock' function code does not require a password. This explo...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: $ curl...

D-Link DIR-803 - Authentication Bypass

An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux apt install...

PhaseHack

PhaseHack Get Phase botnet login information via blind SQL injection...

CVE-2018-9995_dvr_credentials

Tool show DVR Credentiales Exploit Title: "Gets DVR Credentials Modify" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Modify 28/04/2024 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa & batmoshka55 Exploit...

CVE-2018-9995-DVR-Credentials-Extractor

Tool show DVR Credentiales Original Tool: https://github.com/ezelf/CVE-2018-9995dvrcredentials Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel...

mikrotik0dayScanner

Mikrotik 0day Credential Disclosure Scanner Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The weakness exists due to improper authentication in the exposed by default Winbox interface on port 8291/TCP. A remote attacker can send specially...

CMS-Made-Simple-2.2.9-CVE-2019-9053

CMS-Made-Simple-2.2.9 - SQL-Injection-Exploit - CVE-2019-9053 Description This repository contains an exploit for an unauthenticated SQL injection vulnerability in CMS Made Simple versions 2.2.9 and earlier. This vulnerability, identified under CVE-2019-9053 , allows an attacker to retrieve...

CVE-2013-1081

This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...

CVE-2013-6117

CVE-2013-6117 $ ./CVE-2013-6117 -h Options: -h, --help display help information -f, --filename File containing list of IP addresses -t, --target Target IP -n, --threads No of concurrent threads default: 100 $ ./CVE-2013-6117 -f hostfile.txt 1.2.4.4|name.no-ip.org:80|username|password $...

CVE-2021-3019

CVE-2021-3019 LanProxy Directory Traversal Lanproxy is an intranet penetration tool that proxies LAN personal computers and servers to the public network. It supports tcp traffic forwarding and supports any tcp upper layer protocol access to intranet websites, local payment interface debugging, s...

CVE-2022-31890

CVE-2022-31890 for osTicket | Support Ticketing System Nickname: python nickname.py The output of the first nickname in the table. Password: python password.py The output of the first password in the table. Output to file: python dumpFile.py cat dump.txt || nickname::password Output to console:...

CVE-2017-7921-rewrite

CVE-2017-7921-rewrite simple CVE-2017-7921 rewrite in python by me. for educational purposes only! kinda simple, i didnt include checks for stuff like ips, and advanced checks for the response and such. I tested it on a camera I am authorized to test it on within my local network and it seems to...

CVE-2020-25078

CVE-2020-25078 Instructions instructions Place the attack URLs in the same directory as ip.txt The attack IP is placed in the same directory as ip.txt Terminal log root@localhost:/CVE-2020-25078ls CVE-2020-25078.py ip.txt root@localhost:/CVE-2020-25078cat ./ip.txt https://xxx.xxx.xxx.xxx:3128...