yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

yasuo

YASUO @0xsauby Descrição Yasuo é um script Ruby que procura por aplicações web de terceiros vulneráveis. Durante uma avaliação de segurança de rede interna, externa, redteam, etc., frequentemente encontramos aplicações web de terceiros vulneráveis ou front-ends web que nos permitem comprometer o...

eval-stdin

La vulnerabilità PHP eval-stdin.php CVE-2017-9841 è una vulnerabilità RCE nel eval-stdin.php obsoleto. Questo exploit è solo un'automazione per la vulnerabilità menzionata ed è ancora in fase di sviluppo. Scritto in Ruby 3.0.4 in meno di 2 ore, testato su Kali Linux, Arch Linux, Ubuntu minimal e...

CVE-2021-41773

CVE-2021-41773 Beschreibung Dieses Skript nutzt CVE-2021-41773 aus, um Dateien auszulesen und/oder Befehle auszuführen. Dieses Skript ist verfügbar für: Nmap Python Ruby Anforderungen Python python3 python3 Standardbibliothek Ruby Ruby Ruby Standardbibliothek Installation root@kitploit: git clone...

CVE-2019-16405.rb

Questo repository non contiene un README...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu — это скрипт клиента MySQL на Ruby, который я написал. Он выполняет большинство функций обычного клиента MySQL: SQL Shell, обновление/удаление/удаление базы данных/таблицы, добавление/удаление пользователей, дамп базы данных/таблицы с опцией gzip...... Плюс несколько...

HatCloud

HatCloud - descontinuado HatCloud construído em Ruby. Ele faz bypass no CloudFlare para descobrir IP real. Isto pode ser útil se você precisar testar seu servidor e seu site. Testar sua proteção contra DDoS negação de serviço ou DoS. CloudFlare é um serviço de rede de entrega de conteúdo e serviç...

CVE-2024-46986

CVE-2024-46986 Exploração do Camaleon CMS - Upload Arbitrário de Arquivos Este repositório contém um script Python que automatiza a exploração de uma vulnerabilidade de upload de arquivos no Camaleon CMS. A vulnerabilidade permite que um atacante envie arquivos arbitrários como scripts Ruby para ...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey Чтобы узнать, как создать поддельный ключ и подписать код ТРЕБУЕТСЯ: openssl, main.rb который я загрузил ПОСЕТИТЕ : https://twitter.com/exploitblizzard...

EUVD-2017-16647

Malware in sbrugna...

Exploit for CVE-2010-1485

PoC exploit for CVE-2010-1485, Exploit module/toolkit targeting XXE vulnerability. The target product/service or framework is unspecified, but the tool is designed to automate exploitation of XXE vulnerabilities in various applications. The vulnerability class/vector is XXE XML eXternal Entity. T...

Exploit for Link Following in Rarlab Unrar

A proof of concept for CVE-2022-30333 - a path traversal vulnera...

Exploit for Off-by-one Error in Sudo_Project Sudo

PoC exploit for CVE-2021-3156, an exploit module targeting the WangluoAnquan framework. The exploit is designed to demonstrate the vulnerability in the framework's UploadHandler.ashx component, which allows for arbitrary file uploads. The exploit uses a simple form submission to upload a maliciou...

Exploit for Cross-site Scripting in Tastyigniter

PoC exploit for CVE-2021-38699. The target product/service is Java, and the vulnerability class/vector is XXE XML External Entity injection. The probable entry point is the XXEinjector.rb script, which is a Ruby script that automates the exploitation of XXE vulnerabilities using direct and out of...

h1-ctf: 12 Days of Hacky Holidays write-up, but as a text-based RPG?

The flags are - flag48104912-28b0-494a-9995-a203d1e261e7 - flagb7ebcb75-9100-4f91-8454-cfb9574459f7 - flagb705fb11-fb55-442f-847f-0931be82ed9a - flag972e7072-b1b6-4bf7-b825-a912d3fd38d6 - flag2e6f9bf8-fdbd-483b-8c18-bdf371b2b004 - flag18b130a7-3a79-4c70-b73b-7f23fa95d395 -...

Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass

!/usr/bin/env ruby Title: Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass Author: noraj Alexandre ZANNI Author website: https://pwn.by/noraj/ Date: 2020-08-16 Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/3.9.2.tar.gz Version: = 3.9.2...

XXEinjector

This is an exploit module/toolkit targeting XXE XML eXternal Entity vulnerabilities. The primary CVE ID is not explicitly stated, but the tool is designed to automate exploitation of XXE vulnerabilities using direct and out-of-band methods. The target product/service is likely web applications,...

CVE-2018-8780

It was found that the methods from the Dir class did not properly handle strings containing the NULL byte. An attacker, able to inject NULL bytes in a path, could possibly trigger an unspecified behavior of the ruby script. Mitigation It is possible to test for presence of the NULL byte manually...

Homematic CCU2 2.29.23 Arbitrary File Write

!/usr/bin/ruby Exploit Title: Homematic CCU2 Arbitrary File Write Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7300 Description:...

Homematic CCU2 2.29.23 - Remote Command Execution

!/usr/bin/ruby Exploit Title: Homematic CCU2 Remote Command Execution Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7297 Description:...