CVE-2022-22965-Spring-Core-Rce

Spring-Core JDK9+ RCE Usage Instructions ╰─ ./CVE-2022-22965 -h ─╯ Single target: ./CVE-2022-22965 -u http://127.0.0.1:8080 Batch scan: ./CVE-2022-22965 -l url.txt Local Vulnerability Testing 0x01 Docker Image docker pull vulfocus/spring-core-rce-2022-03-29 docker run -itd -p 8080:8080 -P...

CVE-2020-8813

CVE-2020-8813 Cacti v1.2.8 Unauthenticated Remote Code Execution Uses Python 3 Running without Docker: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py Running with Docker:...

AVideo3xploit

AVideo3xploit.go RCE exploit for AVideo root@kali: go get github.com/fatih/color root@kali: git clone https://github.com/ahussam/AVideo3xploit.git root@kali: cd AVideo3xploit root@kali:/AVideo3xploit go run AVideo3xploit.go http://target/avideo/ username password You should get a connection on yo...

CVE-2019-7192_QNAP_Exploit

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit for now, you can read system files /etc/shadow, ssh private key, etc. Usage: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port Sample Output Vulnerability The vulnerabilities can be...

tivoli-poc

tivoli-poc CVE-2017-1635 PoC code CVEID: CVE-2017-1635 CVSS Base Score: 8 Affected Products and Versions: KDH component of IBM Tivoli Monitoring Basic Services KGL,KAX for Version 6.2.2.0 through 6.2.2.9 A vulnerability exists in the internal web server provided by IBM Tivoli Monitoring basic...

CVE-2021-3345

CVE-2021-3345 Actual working exploit for CVE-2021-3345...

CVE-2022-24122

CVE-2022-24122 Simple Denial of Service using CVE-2022-24122 It works with 1 core system and it has 80% probability of success with 2 cores...

ropium

About ROPium ex-ROPGenerator is a library/tool that makes ROP-exploits easy. It automatically extracts and analyses gadgets from binaries and lets you find ROP-chains with semantic queries. ROPium supports X86 and X64 architectures, soon to be extended with ARM. Key features: Effortless : ROPium...

agx-exploit

CVE-2022-32947 presentation and demo Watch the live stream presentation with Lina and Cyan here!!! ✨ 日本語の配信はこちら！！ ✨...

cve-2020-11651-exp-plus

Use bash to execute the --exec parameter. The original script uses /bin/sh, so some commands are incompatible, such as bash reverse shell. 2. The original code retrieves the local salt-master version to determine if the remote host is affected, which is a clear logical error. I directly removed...

NTP_CVE-2013-5211

NTPCVE-2013-5211 Exploit and check CVE-2013-5211...

CVE-2020-10199-Nexus-3.21.01

CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Remote Code Execution Authenticated - Updated This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit https://www.exploit-db.com/exploits/49385 Change the user,password,URL and CMD...

0logon

This repository does not have a README...

CVE-2022-0543

CVE-2022-0543 1.Introduction Redis Sandbox Escape Vulnerability CVE-2022-0543 POC&EXP 2.Usage RedisRCE -help 查看帮助信息 RedisRCE -h 192.168.0.100:6379 无密码连接 //输入q退出程序 RedisRCE -h 192.168.0.100:6379 -p 123456 密码连接 3.Disclaimer This tool is only for learning, research, and self-checking. It should not ...

struts-pwn

struts-pwn Apache Struts CVE-2017-5638 的漏洞利用工具 用法 测试单个 URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' 测试 URL 列表. python struts-pwn.py --list 'urls.txt' -c 'id' 检查单个 URL 是否存在漏洞. python struts-pwn.py --check --url...

CVE-2022-40684

CVE-2022-40684 CVE-2022-40684单独或者批量exp 食用方法 生成公钥 python3 exp.py -u ip:port -k idrsa2048.pub -l hosts.txt指定文件批量 FOFA title="FortiGate"...

Apache_Penetration_Tool

ApachePenetrationTool A vulnerability exploit tool developed using QT C++, for details of the vulnerability analysis, please refer to: https://www.hui-blog.cool/posts/de1f.html Tool interface At the vulnerability selection number, select the vulnerability that needs to be detected. Vulnerability...

CVE-2014-160

CVE-2014-160 exploit Use like this: ./cve-2014-160 dvwa.local https && strings datadump.bin...

CVE-2021-26855-exploit-Exchange

CVE-2021-26855 exploit-Exchange Auto Scan the World and auto exploit rce By EOG Team...

CVE-2021-25641

CVE-2021-25641 A Exploit Tool For CVE-2021-25641. All dependencies was packed,You don't care the dependencies problem If you have dependencies you can just donwload the CVE-2021-25641.jar to run. Used for: Basic dubbo-common =2.7.3 Dubbo 2.7.0 to 2.7.8 Dubbo 2.6.0 to 2.6.9 Dubbo all 2.5.x version...