Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

OpenSSH-4.7p1-CVE-2008-5161-Exploit

CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 Debian-8ubuntu1 targets by driving Metasploit’s auxiliary/scanner/ssh/sshlogin module from Python via pwntools. This project is intended for research and authorized security testing...

cookie_crimes

استخراج ملفات تعريف الارتباط الخاصة بـ Chrome بدون صلاحية الجذر سيقوم هذا بعرض ملفات تعريف الارتباط الخاصة بـ Chrome للمستخدم. لا تحتاج إلى معرفة كلمة مرورهم أو أن تكون صلاحية الجذر لاستخدامه. رائع رائع رائع رائع رائع. إذا لم تكن من النوع الذي يحصل بانتظام على القدرة على تنفيذ الأكواد على أجهزة...

msfconsole-termux

msfconsole-termux كيفية تثبيت Metasploit-Table على Termux للأندرويد pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh مثال msfconsole -q -x "use...

msfpc

MSFvenom Payload Creator MSFPC طريقة سريعة لتوليد حمولات "أساسية" متنوعة من Meterpreter عبر msfvenom جزء من إطار عمل Metasploit. حول MSFvenom Payload Creator MSFPC هو غلاف لتوليد أنواع متعددة من الحمولات، بناءً على اختيار المستخدم. الفكرة هي أن تكون بسيطة قدر الإمكان تتطلب مدخلاً واحدًا فقط لإنتا...

CVE-2012-1495-Webcalendar-

CVE-2012-1495-Webcalendar- Prerequisites : Kali Linux or Parrot OS machine 1- Clone the repository 2- Extract the archive "webcalendar" 3- Create the Docker container and launch it using the commands: docker build -t webcalendar . docker run -d -p 80:80 webcalendar 4- On your Kali machine, launch...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...

AutoPentest-DRL

AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning AutoPentest-DRL is an automated penetration testing framework based on Deep Reinforcement Learning DRL techniques. AutoPentest-DRL can determine the most appropriate attack path for a given logical network, and can...

CVE-2014-6271-IPFire

CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire =2.15 ShellShock RCE Based on the Metasploit module for the same exploit EDB ID: 34839 Exploit is automatic. See ./CVE-2014-6271.py --help for a full range of switches Warning: The code in this repository may be used for academic/ethic...

cve-2013-3319

cve-2013-3319 metasploit module for CVE-2013-3319 / SAP Security Note 1816536 obsolete : use saphostctrlgetcomputersystem from metasploit. This is kept for historical purposes only. Full advisory: http://labs.integrity.pt/advisories/cve-2013-3319/...

CVE-2019-5624

CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...

CVE-2019-15029

CVE-2019-15029 The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit Module I wrote a simple Metasploit module to exploit this issue fusionpbxservices.rb, you just have to download it and copy it into metasploit modules directory...

rails-rce-cve-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

Embedded-Backdoor-Connection

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

autoscan

autoscan.sh Overview autoscan.sh is fully automated penetration test tool linked with Metasploit, nmap and other free avialable tools and report all of this in faraday faraday is one tool, you can use it for other open source reporting tools, an example is to export it in jira. Autoscan identifie...

CVE-2021-36260-metasploit

CVE-2021-36260-metasploit the metasploit scriptPOC about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. preparation POC git...

meterssh

اسم الأداة: MeterSSH كتب بواسطة: David Kennedy الشركة: TrustedSec الموقع: https://www.trustedsec.com تويتر: @TrustedSec, @HackingDave MeterSSH هي طريقة لأخذ شيل كود shellcode، وحقنه في الذاكرة، ثم نفق أي منفذ تريده عبر SSH لإخفاء أي نوع من الاتصالات على أنها اتصال SSH عادي. طريقة العمل هي بحقن...

RAWR

RAWR - Rapid Assessment of Web Resources by: al14s - Romans 5:6-8 Twitter: @RapidWebEnum | Freenode: rawr-project Wiki - Home | Installation | Usage | Community | FAQ RAWR is a python tool that is designed to make the process of web enumeration easy and efficient by providing pertinent informatio...

MSF-Testing-Scripts

نصوص اختبار وحدات Metasploit يحتوي هذا المستودع على الكود المطلوب لاختبار بعض وحدات Metasploit التي ساعدت في كتابتها. brocadeemulator.py وحدة Metasploit: auxiliary/scanner/telnet/brocadeenablelogin juniperssg5emulator.py وحدة Metasploit: auxiliary/scanner/ssh/juniperbackdoor.rb انظر أيضًا إلى مجل...

CVE-2020-10199-Nexus-3.21.01

CVE-2020-10199-Nexus-3.21.01 Sonatype Nexus 3.21.01 - Remote Code Execution Authenticated - Updated This version is based from Alvaro Muñoz 49385 and from metasploit nexus exploit https://www.exploit-db.com/exploits/49385 Change the user,password,URL and CMD...