CVE-2017-0199

漏洞利用工具包 CVE-2017-0199 Exploit toolkit CVE-2017-0199 是一个方便的 python 脚本，为渗透测试人员和安全研究人员提供了一种快速有效的方法来测试 Microsoft Office RCE。 它可以生成恶意的 RTF/PPSX 文件，并将 metasploit / meterpreter / 其他 payload 交付给受害者，无需任何复杂配置。 此脚本已修改为支持 python 3。...

CVE-2019-14271_Exploit

CVE-2019-14271Exploit A convenient and time-saving auto script of building environment and exploit it. References https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271...

sslWeakness

sslWeakness Example script demonstrating a weak PRNG, CVE-2008-0166...

CVE-2023-29923

Vulnerabilidad de Acceso No Autorizado en PowerJob V4.3.1 Puedes usar este proyecto para verificar si el sitio web tiene la vulnerabilidad CVE-2023-29923 y admite verificación por lotes Uso: 1. python3 CVE-2023-29923.py -u "http://ip:port" 2. python3 CVE-2023-29923.py -f url.txt...

CVE-2018-15473-exp

CVE-2018-15473-exp This is an exp for CVE-2018-15473 I feel that the username enumeration for openssh 7.7 is quite common, so I wrote an exp that can call poc and exploit it with a dictionary. The poc is written in python2.7, and openssh.py is written in python3; pay attention when calling them...

GitLab-Graphql-CVE-2020-26413

GitLab-Graphql-CVE-2020-26413 GitLab-Graphql-CVE-2020-26413 POC Single verification: python3 GitlabCVE-2020-26413.py -u http://127.0.0.1 Batch verification python3 GitlabCVE-2020-26413.py -f target.txt The vulnerability results will be generated in the current path of the script...

CVE-2004-0789-DDOS

root@kitploit: sudo python3 exploit.py Enter the DNS server IP address: IP Enter the number of requests to send: NUMBER...

PyUsernameMapScriptRCE

PyUsernameMapScriptRCE CVE-2007-2447 exploit written in python to get reverse shell...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 on Android 12, 13 before the March 2024 security update for data backup Usage ./CVE-2024-0044-EXP.sh Sample ./CVE-2024-0044-EXP.sh com.tencent.mm Description Vulnerability discovery https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.ht...

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection Vulnerability CVE-2022-30525 Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Usage python3 CVE-2022-30525.py -u http://127.0.0....

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306 Usage .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212- Download files from my repostry using git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git now to set docker image Creating docker image use the command sudo docker build -t work . To...

EUVD-2026-74794

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop Database/Table, Add/Delete Users, Dump Databases/Table w/ option for gzip...... Plus a few extra options to make life a little easier for...

Detect_polyfill_CVE-2024-38537-

DetectpolyfillCVE-2024-38537 Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy CSP header of a given web application. Steps: 1.Save the modified script checkcspfromfile.py in the same directory as your urls.txt file. 2.Run the script using pyth...

CVE-2021-3156-Mitigation-ShellScript-Build

CVE-2021-3156-Mitigation-ShellScript-Build Considering the Vulnerability focused in SUDO 2021 in CVE-2021-3156 this is an attempt to craete a script for process checker and if teh designated process exists then it invokes authenticationa and locks out system...

CHAMILO-CVE-2023-34960

CHAMILO-CVE-2023-34960 Python 2.7 请我喝咖啡： Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC 如何使用？ 安装 Python 2.7 在此下载 python file.py...

OpenSSL-Vulnerability-Detection-Script

OpenSSL-Vulnerability-Detection-Script This is an OpenSSL Vulnerability Detection Script for CVE-2022-2274...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Shell Script to mitigate CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache Installation root@kitploit: wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Usage Complete fix and suggested way to mitigate the vulnerabilty This...