UltraRealy_with_CVE-2019-1040

UltraRelay Updated by Lazaar Sami for the exploit CVE-2019-1040 UltraRelay is a tool for LLMNR poisoning and relaying NTLM credentials. It is based on Responder and impack. I have updated the original version https://github.com/5alt/ultrarelay for the exploit CVE-2019-1040. Dirk-jan Mollema has...

CVE-2020-0796

CVE-2020-0796 SMBv3 RCE vulnerability in SMBv3 Windows 10 is vulnerable Windows 2008 Not vulnerable Detection Script...

CVE-2019-2890

Disclaimer For learning and communication purposes only. Use for other purposes is at your own risk. Description The relevant jar files have been imported into the project, and the exploitation method uses yso's JRMP. When learning and debugging, you can modify the exploitation method. First, pla...

CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

DVS

DCOM Vulnerability Scanner AKA Devious swiss army knife - Lateral movement using DCOM Objects Did you ever wonder how you can move laterally through internal networks? or interact with remote machines without alerting EDRs? Let's assume that we have a valid credentials, or an active session with...

CVE-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

windows-kernel-exploits

windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...

cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 command injection CVE-2022-46169 vulnerable application This is a vulnerable application to test the exploit for the Cacti vulnerability CVE-2022-46169. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: root@kitploit: docke...

log4shell-vulnerable-app

Aplicación de ejemplo vulnerable Log4Shell CVE-2021-44228 Este repositorio contiene una aplicación web Spring Boot vulnerable a CVE-2021-44228, apodada Log4Shell. Utiliza Log4j 2.14.1 a través de spring-boot-starter-log4j2 2.6.1 y el JDK 1.8.0181. Ejecutar la aplicación Ejecútala: root@kitploit:...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084, Atlassian Confluence OGNL Injection Vulnerability Atlassian Confluence is a widely used wiki system in enterprises, and some versions contain an OGNL expression injection vulnerability. Attackers can exploit this vulnerability to execute arbitrary code on the target...

cve-2021-44228-log4j-exploits

CVE-2021-4428 Reproduction This DEMO is a replication of the Log4j2 ultra-high-risk RCE vulnerability CVE-2021-4428, aiming to understand the harmfulness of this vulnerability and make targeted defenses based on your system's situation. Warning This DEMO is solely for technical research purposes...

CVE-2019-2725

CVE-2019-2725 CVE-2019-2725 CNVD-C-2019-48814, WebLogic wls9-async Command Echo 10.3.6 12.1.3 ResultBaseExec.java Used for testing defineClass. It will recover the malicious class from base64 and execute the code, mainly for convenience optional. JDK7u21.java Generates the XML in...

CVE-2026-10195

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec function, combined with missing authorization checks on the REST API endpoints...

zoneminder-snapshots-rce-poc

Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...

CVE-2022-26134-Exploit-Detection

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requisites 1. ClamAV Clone this repository or download the Yara rule on your confluence server We are using the Yara rule provided by volexity/threat-intel who first unveiled this vulnerability. Git Clone root@kitploit: git clone...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: now lets do it...

cacti-rce-snmp-options-vulnerable-application

Cacti v1.2.24 inyección de comandos autenticada CVE-2023-39362 aplicación vulnerable Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2023-39362. ¡ADVERTENCIA! ¡Esta aplicación contiene vulnerabilidades de seguridad graves. Úsela bajo su propio riesgo! Se...