fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

CVE-2019-15029

CVE-2019-15029 The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit Module I wrote a simple Metasploit module to exploit this issue fusionpbxservices.rb, you just have to download it and copy it into metasploit modules directory...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2012-2982-Python-PoC

CVE-2012-2982-Python-PoC This was converted from a metasploit module as an exercise for OSCP studying. It originally came from becoming frustrated with no public exploits to use manually for the box Gamezone from TryHackMe. I anaylzed the metasploit code and coverted it to python. Proof screensho...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan !alt textcitrix This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability...

Metasploit-Module-TFM

Custom Metasploit Module for CVE 2023-2728 and CVE 2024-3177 Description This custom module exploits CVE 2023-2728 and CVE 2024-3177 in Kubernetes versions that are vulnerables to each of them e.g. v1.27.2 is vulnerable to both, both related to bypassing the imposition of the mountable secrets...

CVE-2021-22005-metasploit

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

SMBGhost-LPE-Metasploit-Module

SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

CVE-2019-15107

CVE-2019-15107 Implémentation Python de l'exploit de porte dérobée RCE de Webmin 1.890-1.920 CVE-2019-15107 Basé sur le module Metasploit pour le même exploit EDB ID: 47230 L'exploit est principalement automatique. Voir ./CVE-2019-15107.py --help pour la liste complète des options. Avertissement ...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

CVE-2017-10271

CVE-2017-10271 Weblogic wls-wsat Component Deserialization Vulnerability CVE-2017-10271 Detection and Exploitation Script Usage $ python CVE-2017-10271.py -l 10.10.10.10 -p 4444 -r http://will.bepwned.com:7001/ Features Standalone Python script Check functionality to see if any host is vulnerable...

cve-2013-3319

cve-2013-3319 metasploit module for CVE-2013-3319 / SAP Security Note 1816536 obsolete : use saphostctrlgetcomputersystem from metasploit. This is kept for historical purposes only. Full advisory: http://labs.integrity.pt/advisories/cve-2013-3319/...

CVE-2016-2776

CVE-2016-2776 A tale of a DNS Packet, a detailed walk-thru and proof of concept of BIND's CVE-2016-2776. http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html In this repository you will find: Proof-of-Concept namedown.py Metasploit Auxiliary Module namedown.rb...

Bluekeep-Hunter

Bluekeep-Hunter CVE-2019-0708 Ce script utilise le module metasploit pour scanner et vérifier si la vulnérabilité CVE-2019-0708 existe ou non. L'objectif est de vérifier et de confirmer si les ordinateurs de l'organisation sont réellement vulnérables ou non, plutôt que de se baser sur une simple...

NetMRI-2014-3418

NetMRI-CVE-2014-3418 - Модуль Metasploit Модуль Metasploit для внедрения команд ОС в InfoBlox Network Automation Продукт: NetMRI Switch Port Manager Automation Change Manager Security Device Controller Производитель: InfoBlox Уязвимые версии: 6.4.X.X-6.8.4.X Протестированная версия: 6.8.2.11...

emby_ssrf

msfemby Этот инструмент проверяет удалённый EMBY-сервер, пытаясь использовать SSRF-уязвимость для выполнения HTTP-сканирования внутренней сети этого сервера. Инструмент основан на уязвимости CVE-2020-26948. Установка Клонируйте репозиторий и поместите rb-файлы в каталог...

CVE-2015-1578-PoC-Metasploit

Module Metasploit CVE-2015-1578 Aperçu Ceci est un module Metasploit pour CVE-2015-1578 , une vulnérabilité de débordement de tampon dans Achat 0.150 beta7 sur Windows. L'exploitation permet l'exécution de code à distance via un paquet UDP conçu. Objectif Ce module est conçu pour servir d'exemple...

pipe_finder

Pipe Finder 1.0 Script automatisé pour rechercher dans le protocole SMB les noms de pipe disponibles Captures d'écran Prérequis metasploit-framework wget locate module pipeauditv2.rb https://github.com/peterpt/pipeauditorfb - Il sera installé lors de la première exécution Installation des prérequ...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...