110963 matches found
CVE-2022-0540-RCE
Atlassian Jira Seraph 인증 우회 RCE CVE-2022-0540 English • 中文 익스플로잇 상세 작성자의 블로그에서 볼 수 있듯이, Atlassian은 영향을 받는 플러그인의 긴 목록을 제공했으며대부분 거짓 양성이었음, 작성자는 몇 가지 실제 영향을 받는 플러그인을 나열했습니다. 제시된 조건에 따라, Jira용 WBS Gantt-Chart 공식 문서와 결합하면 본질적으로, 작업 스케줄러 모듈 Task의 Beanshell Script를 사용한 RCE이며, 익스플로잇 세부 사항은 다음과 같습니다. 1. 수...
CVE-2007-2447
CVE-2007-2447 — username map script «Функциональность MS-RPC в smbd в Samba 3.0.0–3.0.25rc3 позволяет удалённым злоумышленникам выполнять произвольные команды через метасимволы оболочки с участием функции 1 SamrChangePassword, когда включена опция smb.conf «username map script», а также позволяет...
ConditionalAccessDocumentation
PowerShell을 사용한 조건부 액세스 문서화 이 PowerShell 스크립트는 Microsoft Entra 조건부 액세스 정책을 문서화합니다. 스크립트는 모든 데이터를 csv 파일로 내보내며, 이를 엑셀 통합 문서로 예쁘게 포맷할 수 있습니다. 모든 정책을 검색하고 문서화할 수 있도록 스크립트는 Microsoft Graph Beta API 엔드포인트를 사용합니다. 설치 및 사용 1. PowerShell 갤러리에서 이 스크립트를 설치합니다종속 Microsoft.Graph.Authentication 모듈이 자동으로 설치됩니다...
Compromised-Org-Chart-Generator
Compromised Org Chart Generator Overview Active Directory is used by organization as the identity provider. It contains information of all employees including their names, job titles, departments, and their managers. Password audits can help to discover weaknesses and risks. You might try passwor...
VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972
VMwarevCenterUNAuthorizedRCECVE-2021-21972 zoomeye dork：app:"VMware vCenter" 使用pocsuite3编写的无害检测脚本VMwarevCenterUNAuthorizedRCE.py，使用近一年的数据进行探测： 成功率约为：1551 / 3998 = 39%...
AutoIt-Ripper
AutoIt-Ripper 이것은 무엇인가 PE 실행 파일에서 "컴파일된" AutoIt 스크립트를 추출할 수 있는 짧은 파이썬 스크립트입니다. 참고 자료 이 스크립트는 3개의 자료를 크게 기반으로 하며, AutoIt에 대해 더 깊이 알아보고 싶다면 꼭 확인해 보세요: http://files.planet-dl.org/Cw2k/MyAutToExe/index.html Github 미러 I Github 미러 II https://github.com/sujuhu/autoit...
PySCTChecker
PySCTChecker Description This is a Quick and dirty Python script for checking if a domain properly implements Certificate Transparency. If so, it is possible to observe how Certificate Transparency is implemented on the server side. When a server implements Certificate Transparency, it must offer...
CVE-2025-25612
CVE-2025-25612: FS S3150-8T2F スイッチ 格納型クロスサイトスクリプティング XSS CVE-2025-25612 FS Inc S3150-8T2F のバージョン S3150-8T2F2.2.0D135103 より前のバージョンは、管理インターフェースの「時間範囲設定」機能においてクロスサイトスクリプティング XSS の脆弱性があります。攻撃者は、「Time Range...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
CVE-2017-5638
CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...
CVE-2024-6387
CVE-2024-6387 check if your server exist CVE-2024-6387 by below one line bash script: root@kitploit: curl -fsSL https://dub.sh/cve-2024-6387-CN |bash...
dr_checker
DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...
CVE-2024-3094
CVE-2024-3094 Credit: https://gist.github.com/Sn0w3y This script detects if it's likely that the ssh binary on a system is vulnerable to CVE-2024-3094. Unlike the detection script originally written by Vegard Nossum, this one doesn't use hexdump as it needs to be installed separately on most dist...
CVE-2023-4166
CVE-2023-4166 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u single URL target file python3 CVE-2023-4165.py -f url.txt Then just verify the address...
Grafana_POC-CVE-2021-43798
Grafana-Poc Этот инструмент не должен использоваться для незаконных целей. 1. Способ использования: python3 grafanahole.py Введите ip:port в domain.txt 2. Область воздействия уязвимости Затронутые версии: Grafana 8.0.0 - 8.3.0 Безопасные версии: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...
CVE-2021-21975
CVE-2021-21975 Скрипт Nmap для проверки уязвимости CVE-2021-21975 Ссылки на уязвимость: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html Блог...
CVE-2025-0108
Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...
Airopy
Airopy - Wireless Packet Capture Get clients and access points. With Alfa cards this script works correctly. Dependencies To run this script first install requirements as follows: root@kitploit: sudo pip3 install -r requirements.txt How to use In the examples I don't add 'sudo', but to execute th...
CVE-2023-4197
CVE-2023-4197 это простой скрипт из CVE-2023-4197, который был немного изменён, так как изначально он не работал с машиной broadlight из HTB, что означает, что нам нужно немного модифицировать скрипт, а затем использовать его, как описано в документации...