110955 matches found
uacscript
UAC Bypass Vulnerability in Windows Script Host The Windows Script Host executables suffer from a vulnerability due to a missing embedded manifest. Using another exploit, the combination of "wusa.exe" and "makecab.exe" files can be copied to the Windows folder. Copies of a manifest and the script...
CVE-2015-1635
️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...
dotnetpaddingoracle
dotnetpaddingoracle Small script to check if the .NET web application is vulnerable to padding Oracle This script actually verify if the oracle is present and exploitable, not just if the patch has been installed. usage root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp reques...
Parsero
What's Parsero? Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries tell the search engines what directories or files hosted on a web server mustn't be indexed. For example, "Disallow: /portal/login"...
CVE-2019-19781
CVE-2019-19781 Batch Proof of Concept Use Usage Limitations 1. Before use, the folder must contain a "data.txt" file with content: 192.168.1.0/24\n 192.168.2.0/24\n 2. Execute only on Linux: python3 CVE-2019-19781-testbata.py 3. If successfully executed and a vulnerability is found, export to...
cve-2020-1472
ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...
pyshell2bin
pyshell2bin If you work with exploits and shellcode, you already know what shellcode is and how to deal with it. Sometimes it comes with exploits in C, Perl, Python… It usually looks like: root@kitploit: payload = b"xbfxabxd0x9ax5bxdaxc7xd9x74x24xf4x5ax2bxc9" +...
CVE-2021-20717
CVE-2021-20717-EC-CUBE-XSS Descripción de NVD Una vulnerabilidad de cross-site scripting en EC-CUBE 4.0.0 a 4.0.5 permite a un atacante remoto inyectar un script especialmente diseñado en el campo de entrada específico del sitio web EC creado con EC-CUBE. Como resultado, puede provocar la ejecuci...
CVE-2022-3602-and-CVE-2022-3786
CVE-2022-3602-and-CVE-2022-3786 This is a detection script which will determine whether client authentication is required by the SSL server, in which case servers based on OpenSSL 3.0.0 to 3.0.6 will be vulnerable to both CVE-2022-3602 and CVE-2022-3786 Prerequisite's python3 pip install -r...
CVE-2019-19781
CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...
CVE-2022-31300
CVE-2022-31300 Haraj Script 3.7 - DM Section Authenticated Stored XSS Exploit Title: Haraj Script 3.7 - Authenticated Stored XSS Date: 2022-06-13 CVE: CVE-2022-31300 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://angtech.org/ Software Link: https://angtech.org/product/view/3...
Recon
👑 Recon 👑 El paso de reconocer un objetivo tanto en Bug Bounties como en Pentest puede consumir mucho tiempo. Pensando en ello, decidí crear mi propio script de reconocimiento con todas las herramientas que más uso en este paso. Toda la construcción de este framework se basa en las metodologías d...
SKA
Acerca de SKA te permite implementar un ataque karma muy simple y rápido. Puedes esnifar probe requests para elegir el nombre del AP falso o, si lo deseas, puedes insertar el nombre del AP manualmente ataque gemelo malvado. Cuando el objetivo se conecte a tu WLAN, puedes activar la redirección HT...
Wallet-Transaction-Monitor
Monitor de Transacciones de Cartera Este script monitorea una dirección de cartera de Bitcoin y notifica al usuario cuando hay cambios en el saldo o nuevas transacciones. Proporciona actualizaciones en tiempo real sobre transacciones entrantes y salientes, junto con los montos y marcas de tiempo...
CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager
RiteCMS 3.0 File Upload - XSS Author: Sergio Description: File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a svg file with XSS content. Attack Vectors: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L POC: We create an svg file with the following content: root@kitploit: When logging...
CVE-2014-4109
This crash is difficult to reproduce. The included proof of concept makes it a little easier to trigger the crashing code path. My super scientific process of checking the crash was to click on the url with one hand and press enter with the other. It usually crashes within 15 attempts. "IE=9" als...
sandcastle
Inspirado por una conversación con @nickelser de Instacart en HackerOne, he optimizado y publicado Sandcastle – un script de Python para la enumeración de buckets S3 de AWS, anteriormente conocido como bucketCrawler. El script toma el nombre de un objetivo como argumento base por ejemplo, shopify...
CVE-2021-41773-POC
CVE-2021-41773-nse By George Labrin @creadpag Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. Use NMAP. First Tab: root@kitploit: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: root@kitploit: sudo nmap -Pn...
CVE-2017-9841
CVE-2017-9841- Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: gi...