mikrotik0dayScanner

Mikrotik 0day Credential Disclosure Scanner Description: The vulnerability allows a remote attacker to execute arbitrary code on the target system. The weakness exists due to improper authentication in the exposed by default Winbox interface on port 8291/TCP. A remote attacker can send specially...

CMS-Made-Simple-2.2.9-CVE-2019-9053

CMS-Made-Simple-2.2.9 - SQL-Injection-Exploit - CVE-2019-9053 Description This repository contains an exploit for an unauthenticated SQL injection vulnerability in CMS Made Simple versions 2.2.9 and earlier. This vulnerability, identified under CVE-2019-9053 , allows an attacker to retrieve...

Python-MikrotikLoginExploit

Mikrotik ログインエクスプロイト Mikrotik の脆弱性 CVE-2018-14847（特に winbox）の PoC（Proof of Concept）で、RouterOS のデフォルトポート 8291 からパスワードを直接読み取ります。 原著者: https://github.com/BigNerd95/ 要件 Python 3+ Linux へのインストール root@kitploit: apt install python3 使用例 WinBox TCP/IP root@kitploit: python3 WinboxExploit.py PORT 例:...

CVE-2018-9995_dvr_credentials

ツール DVR認証情報を表示 root@kitploit: Exploit Title: "DVR認証情報を取得" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa エクスプロイト: root@kitploit: $ curl...

CVE-2023-23397-POC-Powershell

CVE-2023-23397-POC-Powershell ReminderSoundFile 옵션을 사용하여 캘린더 NTLM 누출을 보내거나 저장하는 스크립트 함수들입니다. 스크립트를 실행하여 Powershell에 함수를 로드한 후, 아래 예제를 함수 사용의 시작점으로 활용할 수 있습니다. Outlook COM 개체를 사용하여 이메일을 보내므로 Outlook이 설치된 Windows 머신에서 실행해야 합니다. 현재 함수는 스크립트 실행 시점을 기준으로 회의 시작 시간을 추가하고 지속 시간을 2시간으로 설정합니다. 또한 Outlook에...

CVE-2018-9995

Инструмент показать учетные данные DVR root@kitploit: Exploit Title: "Получает учетные данные DVR" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel оптимизировано из CodeHolic...

DVR_Sploit

DVRSploit CVE-2018-9995를 자동화하는 간단한 python3 스크립트 요구 사항: requests pip install requests 사용법: root@fuckmachine: python3 dvrsploit.py DVR 호스트 입력: 192.168.69.69 DVR 포트 입력: 88 장치 목록:...

CVE-2020-15931

CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Уязвимость раскрытия учетных данных учетной записи администратора домена Обзор уязвимости Netwrix Account Lockout Examiner ALE до версии 5.1 позволяет неаутентифицированному удаленному злоумышленнику инициировать подключение к системе,...

CVE-2018-9995_dvr_credentials-dev_tool

Tool DVR 자격 증명 표시 root@kitploit: Exploit Title: "DVR 자격 증명 가져오기" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa Exploit: root@kitploit: $ curl...

D-Link DIR-803 - Authentication Bypass

An authentication bypass vulnerability exists in D-Link DIR-803 routers firmware A1 1.04 and earlier. By manipulating the AUTHORIZEDGROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication. id:...

CVE-2026-90461

A flaw was found in OpenStack Ironic. When the Image Service is configured for HTTPS Basic Authentication, Ironic may inadvertently transmit a username and password to an unintended remote host. This could lead to the disclosure of sensitive authentication credentials to an attacker who controls...

PhaseHack

PhaseHack 블라인드 SQL 인젝션을 통해 Phase 봇넷 로그인 정보를 획득합니다...

CVE-2022-31890

CVE-2022-31890 для osTicket | Система поддержки тикетов Nickname: root@kitploit: python nickname.py The output of the first nickname in the table. Password: root@kitploit: python password.py The output of the first password in the table. Output to file: root@kitploit: python dumpFile.py cat...

CVE-2018-9995_dvr_credentials

Tool DVR 자격 증명 표시 root@kitploit: Exploit Title: "DVR 자격 증명 획득" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel twitter:@capitanalfa 익스플로잇: root@kitploit: $ curl...

CVE-2021-3019

CVE-2021-3019 Recorrido de Directorios en LanProxy Lanproxy es una herramienta de penetración de intranet que hace de proxy de los ordenadores personales y servidores de la LAN hacia la red pública. Soporta el reenvío de tráfico tcp y cualquier protocolo de capa superior de tcp acceso a sitios we...

CVE-2018-9995_dvr_credentials

Инструмент Показать учетные данные DVR root@kitploit: Exploit Title: "Получает учетные данные DVR Модификация" CVE: CVE-2018-9995 CVSS Базовый балл v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Дата: 09/04/2018 Изменено 28/04/2024 Автор эксплойта: Fernandez Ezequie...

CVE-2017-7921

CVE-2017-7921 익스플로잇 이 스크립트는 CVE-2017-7921 취약점이 있는 카메라와 상호작용하여 다음 작업을 수행할 수 있습니다: 1. 카메라 관리자 비밀번호가 포함된 구성 파일을 다운로드하고 복호화합니다. 2. 매초 이미지를 지속적으로 다운로드합니다. 3. 다운로드한 일련의 이미지를 비디오로 변환합니다. 요구 사항 Python 3.x requirements.txt에 나열된 패키지. 다음 명령어로 설치: root@kitploit: pip install -r requirements.txt 사용법 이 스크립트는 다음...

-CVE-2019-9053

CVE-2019-9053 Этот репозиторий содержит исправленный код для CVE: 2019-9053 Как использовать? В терминале вы можете запустить это с помощью root@kitploit: python3 exploit2019.py После запуска скрипт попросит вас ввести URL и т.д. Следуйте инструкциям, чтобы получить имя пользователя и пароль...

CVE-2026-18061

Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive files from application hosts that read cached query results,...

CVE-2026-18061 Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive files from application hosts that read cached query results,...