110969 matches found
Win-PortFwd
Win-PortFwd Powershell script to setup windows port forwarding using native netsh client Install: git clone https://github.com/deepzec/Win-PortFwd.git Usage: .\win-portfwd.ps1 or powershell.exe -noprofile -executionpolicy bypass -file .\win-portfwd.ps1 Example : Note: This script require admin...
CVE-2024-32002
CVE-2024-32002 Just small script to exploit CVE-2024-32002 based on CVE available How to do First, create 2 empty repos on github or gitlab. Then git clone and run script this. Finally: git clone –recursive repo2 to auto RCE...
CVE-2022-30190
CVE-2022-30190 The script is from https://github.com/JohnHammond/msdt-follina, just make it simple for me to use it and this script aim at generating the payload for more information refer the johnn hammond link...
CVE-2024-4577
将需要扫描的文件放入urls.txt中然后直接运行POC.py 执行命令用EXP.py...
CVE-2024-3400-Canary
CVE-2024-3400 PoC Code Have we not learnt from HoneyPoC? Usage Point script at host: python3 Poc.py...
jenkinsci__script-security-plugin_CVE-2023-24422_1228.vd93135a_2fb_25
脚本安全插件 用户指南 （改编自 CloudBees 插件指南中 模板插件 的信息） 多个 Jenkins 插件要求用户定义自定义脚本，最常见的是使用 Groovy 语言，以定制 Jenkins 的行为。如果编写这些脚本的每个人都是 Jenkins 管理员——特别是拥有 Overall/RunScripts 权限（例如脚本控制台链接所使用的权限）——那么他们可以编写任何他们喜欢的脚本。这些脚本可以使用插件所用的相同 API 直接引用 Jenkins 内部对象。这类用户必须完全受信任，因为他们可以对 Jenkins 做任何事情（甚至更改其安全设置或在服务器上运行 shell 命令）。...
cve-2022-22965
Spring4Shell - CVE-2022-22965 Build let's clone the repository, build and run the container root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc check...
remote-bitlocker-encryption-report
remote-bitlocker-encryption-report 此PowerShell脚本以PC列表作为输入，远程获取其BitLocker加密类型，并将列表输出为CSV文件，以帮助缓解CVE-2018-12038漏洞。 防范CVE-2018-12038漏洞 NIST对CVE-2018-12038的描述如下： 该问题影响三星840 EVO和850 EVO设备（仅限“ATA high”模式，“TCG”或“ATA max”模式不受影响）、三星T3和T5便携式驱动器以及Crucial...
chomp-scan
Chomp Scan A scripted pipeline of tools to simplify the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs. If you've found any bugs using this tool, please let me know! Scope Chomp Scan is a Bash script that chains together the fastest and most effective tools in...
CVE-2025-0108
Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...
Apache-Struts-v4
Apache-Struts-v4 The script contains 5 distinct vulnerabilities that exploit RCE vulnerabilities in Apache Struts. For now it only has the ability to create PHP shells. Added CVEs...
CVE-2020-5902-Scanner
CVE-2020-5902-Scanner Automated script for F5 BIG-IP scanner CVE-2020-5902 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora sudo yum install g...
MemProcFS-Analyzer
MemProcFS-Analyzer MemProcFS-Analyzer.ps1 es un script de PowerShell que se utiliza para simplificar el uso de MemProcFS y optimizar su flujo de trabajo de análisis de memoria. MemProcFS - El sistema de archivos de proceso de memoria, creado por Ulf Frisk https://github.com/ufrisk/MemProcFS...
iDictPy
iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...
F5-BIG-IP-CVE-2020-5902-shodan-scanner
F5-BIG-IP-CVE-2020-5902-checker Simple bash script of F5 BIG-IP CVE-2020-5902 checker using Shodan CLI Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I...
PadBuster
PadBuster - Automated script for performing Padding Oracle attacks Author: Brian Holyfield - Gotham Digital Science [email protected] Credits to J.Rizzo and T.Duong for providing proof of concept web exploit techniques and S.Vaudenay for initial discovery of the attack. Credits also to James...
log4j2_dos_exploit
Description about author: iAmSoScArEd blog: https://www.cnblogs.com/iAmSoScArEd/ github: https://github.com/iAmSOScArEd/ date: 2021-12-20 log4j2 dos exploit log4j2 dos exploit script CVE-2021-45105 Exploit CVE-2021-45105 exploit script Usage how to use English： root@kitploit: Log4j2dos.py -u -m -...
ezsploit
ezsploit Alt text Linux bash 脚本自动化用于 metasploit 用于自动化 metasploit 功能的命令行脚本 检查 metasploit 服务，如果不存在则启动 轻松为 Windows、Linux、Android 和 Mac 制作 meterpreter reversetcp 载荷 启动多个 meterpreter reversetcp 监听器 帮助构建基本持久化选项和脚本 Armitage 启动器 进入 Msfconsole 一些其他有趣的东西 : 待办事项 为载荷/监听器添加更多功能，java、php、tomcat 等 改进整体功能 截图 Alt...