3053 matches found
bash-apocalypse
Bash Apocalypse Automated exploitation toolkit for CVE-2014-6271 Shellshock A complete security research project demonstrating the Shellshock vulnerability that affected millions of servers in 2014. Includes automated scanning, exploitation capabilities, and defensive recommendations. Demo What i...
CVE-2014-6271-Shellshock-
Exploiting Shellshock CVE-2014-6271: A Complete, Modern Demonstration Lab Shellshock CVE-2014-6271 is one of the most influential remote code execution vulnerabilities ever discovered. The flaw affects Bash and allows attackers to execute arbitrary commands simply by injecting crafted payloads in...
CVE-2024-48990-POC
CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...
SUDO-privilege-escalation
SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...
bash-4.2-fixed-CVE-2014-6271
Introduction This is GNU Bash, version 4.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...
NVMS-1000-Directory-Traversal-Bash
NVMS-1000-Directory-Traversal-Bash Directory Traversal Exploit written in Bash for NVMS-1000 CVE-2019-20085. Usage root@kitploit: ./cve-2019-20085-poc.sh -u TARGETURL -f TARGETFILE Example root@kitploit: ./cve-2019-20085-poc.sh -u http://127.0.0.1/ -f path/to/file.txt Disclaimer This POC was...
CVE-2014-6271
Shellshock Vulnerability Checker This script checks if a website is vulnerable to the Shellshock vulnerability CVE-2014-6271. Summary: The Shellshock vulnerability, also known as Bashdoor, is a security flaw that was discovered in September 2014 in the Unix Bash shell. The vulnerability allows...
CVE-2024-7456scripts
CVE-2024-7456 https://nvd.nist.gov/vuln/detail/CVE-2024-7456 に基づいて、bashとNode.jsの両方を使用してSQLiを悪用するための簡単なスクリプトです。...
springhound
springhound Created after the release of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and systems, allowing you to get insight on versions used. Unpacks JARs and analyzes their Manifest files. Usage: ./springhound.sh rootdirectory...
TimeInjector
TimeInjector TimeInjector 是一个基于 CVE-2018-14714 漏洞的 bash 利用脚本 要判断目标是否易受攻击，该脚本首先检查目标是否可达以及能否建立登录会话。 之后，它会检查特定页面的存在，并执行基于时间的注入，以判断系统是否易受远程代码执行（RCE）攻击。 如果系统在执行命令（如 sleep 3）时响应变慢，则表明目标可能存在漏洞。 这是因为服务器在处理注入命令时花费了更多时间，而这一延迟确认了漏洞的存在。 该利用通过向目标发送精心构造的有效载荷，导致系统以非预期方式运行命令，通常能够实现命令执行或信息泄露。...
CVE-2020-7384
CVE-2020-7384 This is an exploit made in bash for CVE-2020-7384. It is a modification of nikhil1232's code here: https://github.com/nikhil1232/CVE-2020-7384/blob/main/CVE-2020-7384.sh My goal was to make the exploit easier to run, along with adding a few QOL improvements. Usage bash CVE-2020-7384...
CVE-2014-6271
CVE-2014-6271 Bash Shellshock and Aftershock Tester for Ansible 1. Install Ansible http://docs.ansible.com/introinstallation.html 2. Add servers to inventory file example: root@kitploit: username@ip 3. Copy your public key to remote servers' .ssh/authorizedkeys 4. execute test $ ansible-playbook ...
CVE-2014-5284
CVE-2014-5284 CVE-2014-5284のBash実装 エクスプロイトタイトル: ossec 2.8 安全でない一時ファイル作成の脆弱性による権限昇格 Pythonは便利ですが、常に機能するわけではありません エクスプロイト作成者: mbadanoiu Pythonエクスプロイト作成者: skynet-13 ベンダーホームページ: www.ossec.net/ ソフトウェアリンク: https://github.com/ossec/ossec-hids/archive/2.8.1.tar.gz バージョン: OSSEC - 2.8 研究に基づいて作成 Jeff Peters...
CVE-2023-23752
CVE-2023-23752 A bash script that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7 through the use of curl and automation. Testing Environment Tryhackme: https://tryhackme.com/r/room/joomify...
detect-log4j-exploitable
CVE-2021-44228 当启用消息查找替换时，能够控制日志消息或日志消息参数的攻击者可以执行从 LDAP 服务器加载的任意代码。 此脚本将帮助检测正在运行的进程中的 log4j 漏洞。它有助于发现系统是否可利用，而无需实际利用该代码。 它将尝试获取使用 java 的进程，并检查 log4j-core 组件。 注意：该脚本使用 bash 编写，并且需要两个包（zip、unzip）才能运行。 参考： MITRE：https://vulners.com/cve/CVE-2021-44228...
CVE-2020-9484
CVE-2020-9484 Bash POC for CVE-2020-9484 that i used in tryhackme challenge...
CVE-2022-22963-Poc-Bearcules
CVE-2022-22963-Poc-Bearcules This is a POC for CVE-2022-22963 I wrote this in bash. I am new to Scripting and this is my first Script Disclaimer I am not Responsible for any miss use or abuse when using this POC . for learning and educational purposes only Thank You...
POC-CVE-2025-68613
Description PoC exploit code for N8N authenticated RCE vulnerability CVE-2025-68613 Usage python3 poc.py -u -c...
CVE-2021-41773
CVE-2021-41773 A simple bash POC script for Path Traversal & RCE vulnerability in Apache 2.4.49 Example usage: Setup a netcat listener: root@kitploit: $ nc -nvlp Then run the script: root@kitploit: $ ./exploit.sh Disclamer This tool is for educational purposes only. I hold no responsibility for a...