cve-exploit

CVE-EXPLOIT 请仅用于合法目的 使用本软件。 我对您的行为不承担任何责任。 使用 Python 3.11.2 由 Edu0x01 制作 描述 cve-exploit 是一个用于查找 CVE 和漏洞利用集的中心。它基于官方 NIST、ExploitDB 和 Github 数据库。该工具可以快速便捷地搜索 CVE 及其关联的漏洞利用，能够检测漏洞利用的编译选项，还可用于列出最新的高危漏洞。 安装 通过 PIP 安装： apt-get install python3 python3-pip python3-dev git libssl-dev libffi-dev...

docker-hacklab

Docker Hacklab 我的个人黑客实验室，创建你自己的。 法文文章：https://blog.ston3o.me/creer-hacklab-virtuel-docker/ 快速开始 $ docker run --name hacklab --net=host --privileged -it ston3o/docker-hacklab zsh | || | /\ / | |/ / | /\ | | |/ \ | ' /dev/null 2&1; docker start hacklab /dev/null; docker exec -it -e COLUMNS=$COLUMNS...

linux-soft-exploit-suggester

linux-soft-exploit-suggester 用于查找系统上所有易受攻击软件的漏洞利用脚本，专注于软件包而不仅仅是内核漏洞。 它使用 exploit database 来评估软件包的安全性，并搜索漏洞利用以帮助进行权限提升。 用法 下载 wget https://raw.githubusercontent.com/belane/linux-soft-exploit-suggester/master/linux-soft-exploit-suggester.py 基本用法。下载漏洞数据库，生成软件包列表并搜索漏洞利用。 python...

Exploits + Shellcode + GHDB

漏洞利用数据库 Git 仓库 这是漏洞利用数据库的官方仓库，一个由Offensive Security赞助的项目。 我们的仓库包括： 漏洞利用与Shellcode：gitlab.com/exploit-database/exploitdb 二进制漏洞利用：gitlab.com/exploit-database/exploitdb-bin-sploits 论文：gitlab.com/exploit-database/exploitdb-papers...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

Findsploit

Findsploit por @xer0dayz https://sn1persecurity.com ACERCA DE Finsploit es un sencillo script bash para buscar rápida y fácilmente bases de datos de exploits tanto locales como en línea. Este repositorio también incluye "copysploit" para copiar cualquier exploit de exploit-db al directorio actual...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

Binary Exploits

Exploit Database 的二进制漏洞利用 二进制漏洞利用位于 /bin-sploits/ 目录中。 这是 The Exploit Database 的官方仓库，该项目由 Offensive Security 赞助。 我们的仓库包括： 漏洞利用与 Shellcode：https://gitlab.com/exploit-database/exploitdb 二进制漏洞利用：https://gitlab.com/exploit-database/exploitdb-bin-sploits...

exploitdb

新仓库位于此处：https://gitlab.com/exploit-database/exploitdb...

Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion

Joomla! Omilen Photo Gallery comomphotogallery component Beta 0.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php. id: CVE-2009-4202 info: name: Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion...

SquirrelMail Address Add 1.4.2 - Cross-Site Scripting

SquirrelMail Address Add 1.4.2 plugin contains a cross-site scripting vulnerability. It fails to properly sanitize user-supplied input, thus allowing an attacker to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

WatchGuard Fireware AD Helper Component - Credentials Disclosure

WatchGuard Fireware Threat Detection and Response TDR service contains a credential-disclosure vulnerability in the AD Helper component that allows unauthenticated attackers to gain Active Directory credentials for a Windows domain in plaintext. id: CVE-2020-10532 info: name: WatchGuard Fireware ...

Joomla! Component WMI 1.5.0 - Local File Inclusion

A directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface aka WMI or comwmi component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1607 info: name: Joomla!...

AeroCMS 0.1.1 - SQL Injection

AeroCMS 0.1.1 contains a SQL injection caused by unsanitized author parameter, letting attackers execute arbitrary SQL commands, exploit requires crafted author input. id: CVE-2022-38812 info: name: AeroCMS 0.1.1 - SQL Injection author: shivampand3y severity: medium description: | AeroCMS 0.1.1...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

CVE-2019-3396_Confluence

CVE-2019-3396Confluence 所有文档都在脚本文件中。此漏洞利用也是由Offensive Security维护的Exploit Database的一部分。 截图...

Windows-RCE-exploits

My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...

exploitdb

The Exploit Database Git Repository This is an official repos...

Exploits + Shellcode + GHDB v2026-09-12

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...