CVE-2015-3224-

CVE-2015-3224- just a stupid version for CVE-2015-3224, for web console. need to setup web server for pty.py...

XSSTracer

XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer is a small python script that checks remote web servers for Clickjacking, Cross-Frame Scripting, Cross-Site Tracing and Host Header Injection. Usage: ./xsstracer...

CVE-2002-0288

CVE-2002-0288 Phusion WebServer 1.0 - Directory Traversal 1 Exploit-db publication at https://www.exploit-db.com/exploits/21291/ CVE-2002-0288 Phusion WebServer 1.0 - Directory Traversal 2 Exploit-db publication at https://www.exploit-db.com/exploits/21292/ Author Alex Hernandez aka @alt3kx...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...

CVE-2021-44228

CVE-2021-44228-POC Yet another CVE-2021-44228 POC Affected Log4j versions: from 2.0-beta9 up to 2.14.1 Prerequisites Used Java: OpenJDK 11 https://jdk.java.net/archive/ Maven required to build apps in this repo alternatively, download prepared jar files from release: https://maven.apache.org/...

CVE-2024-4577

Fastest CVE-2024-4577 Exploitation Tool Description: PHP CGI Remote Code Execution The CVE-2024-4577 Exploit Tool exploit.py is a Python script designed to exploit web servers' specific vulnerability CVE-2024-4577. Based on the response content, it sends POST requests to a list of provided hosts ...

CVE-2014-6271

CVE-2014-6271 - Shellshock.py Shellshock exploit aka CVE-2014-6271. Tested on Bash 3.2 and Bash 4.2. For more information about the vulnerability visit : https://nvd.nist.gov/vuln/detail/CVE-2014-6271 Note The exploit was mainly tested on Hack The Box in the following boxes: Beep box :...

boa-detector

boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...

httpx-action

httpx Action makes it easy to orchestrate httpx with GitHub Action. Example Usage GitHub Action running httpx on list of hosts - name: 💥 httpx - HTTP Web Server probing uses: projectdiscovery/httpx-action@main with: list: hosts.txt Example workflow : .github/workflows/httpx.yml name: 💥 httpx - HT...

Jetleak-Testing-Script

Jetleak Testing Script This tool is intended to provide a quick-and-dirty way for organizations to test whether their Jetty web server versions are vulnerable to JetLeak. Currently, this script does not handle sites with invalid SSL certs. This will be fixed in a future iteration. For additional...

CVE-2024-23334

CVE-2024-23334 Exploit and PoC This repository contains a Proof of Concept PoC exploit for CVE-2024-23334, demonstrating a vulnerability in a web application that allows unauthorized access to sensitive files on the server. The PoC includes a Dockerized web server and an exploit script to test fo...

cve-2021-42013

cve-2021-42013 Apache 2.4.50 Path traversal vulnerability Follow Youtube Twitter Telegram Vulnmachines.com...

CVE-2021-41773

CVE-2021-41773 Path Traversal for Apache 2.4.49 https://ubuntu.com/security/CVE-2021-41773 Affected base time: 22:49 06/10/2021 Usage IP python3 CVE-2021-41773.py -i 10.10.10.10 -s List of ips python3 CVE-2021-41773.py -l /home/ac1d/Documents/code/python/CVE-2021-41773/ips.txt -s Screenshot Check...

CVE-2021-41773-PoC

CVE-2021-41773 Proof of Concept Quick and dirty proof of concept for checking if hosts vulnerable to CVE-2021-41773 python3 full.py hosts.txt Where hosts.txt contains your targets: domain.com blah.com 192.168.1.1 It'll print out if the host is vulnerable or not vulnerable. Python version of bash:...

CVE-2022-21907

CVE-2022-21907 Description 1. This repository detects a system vulnerable to CVE-2022-21907 CVSS:3.1 9.8 and protects against this vulnerability if desired. I offer 2 powershell codes in 1 line. 2. I propose pure python, powershell, ruby scripts and metasploit, nmap modules to attack a vulnerable...

CVE-2024-35106-POC

NEXTU FLETA Wifi6 Router DOS, Potential RCE POC This document describes how the exploit was carried out on the EZNET FLETA WiFI router through the CVE-2024-35106 vulnerability. Vulnerability information CVE ID CVE-2024-35106 Vendor of Product NEXTU Product FLATA AX1500 Wifi6 Router Version 1.0.3...

Netis-N5VN-AC1200-DOS

Exploit Title: Netis N5VN AC1200 - Buffer Overflow DOS Denial of Service Date: 05/03/2024 Exploit Author: Van Lam Nguyen Facebook: fb.com/vanlam1412 Vendor Homepage: Netis Systems Version: Netis N5VN AC1200 V1.0.1.1742 Tested on: Windows CVE : CVE-2024-44596 Overview There exist a buffer overflow...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

CVE-2021-36260-metasploit

CVE-2021-36260-metasploit the metasploit scriptPOC about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. preparation POC git...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...