29764 matches found
Heartbleed_Dockerfile_with_Nginx
Testing Heartbleed with Nginx Dockerfile This repository contains Dockerfile of Nginx with the vulnerable OpenSSL version 1.0.1f for testing CVE-2014-0160 Heartbleed Vulnerability. Base Docker Image debian:latest Installation 1. Install Docker Example with Debian: apt-get install -y docker 2...
thm_steelmountain_CVE-2014-6287
thmsteelmountainCVE-2014-6287 a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit...
CVE-2014-3566-poodle-cookbook
CVE-2014-3566-poodle This cookbook will error out your chef run if your server is vulnerable to CVE-2014-3566. Although this cookbook can be used to watch for failed chef runs, it is also a proof of concept. Supported Platforms Ubuntu 12.04 Centos-6.4 Attributes Key | Type | Description | Default...
CVE-2014-160
CVE-2014-160 exploit Use like this: ./cve-2014-160 dvwa.local https && strings datadump.bin...
lighty-sqlinj-demo
title: Ep4 - Network-Related Vulnerability members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Related vulnerability: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirm:...
CVE-2014-1266-poc
OS X/iOS SSL Flaw POC Overview This repository contains some Go code that demonstrates the recently discovered SSL verification vulnerability in iOS and OS X. Apple Update Announcement Adam Langley's writeup Usage $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd CVE-2014-1266-po...
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287
rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. nc -lnvp 1234 Change the attacker ip to your ip and port. Also create a...
CVE-2014-7911poc
CVE-2014-7911 POC for CVE-2014-7911 for Nexus5 Android 4.4.4r1 based on retme7 and auo, use different rop chain Info Usage launch this poc, click the “CVE-2014-7911” button, you will see a pwn.txt created by system user in /data:...
CVE-2014-6271
This repository does not have a README...
cve-2014-7920-7921_update
cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...
shellshock-cgi
shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for incoming connection...
OpenSSL-HeartBleed-CVE-2014-0160-PoC
This repository does not have a README...
ElasticSearch-CVE-2014-3120
ElasticSearch search Remote Code Execution CVE-2014-3120 POC Code to exploit CVE-2014-3120 Requirements: python Usage: python elasticcheck.py Example: ➜ $ python elasticcheck.py hostport.txt 0 10.0.0.10:9200 Vulnerable 1 10.0.0.11:9201 Not Vulnerable 2 10.0.0.12:9201 Connection error Vulnerable...
heartbleed-tools
OpenSSL Heartbleed CVE-2014-0160 vulnerability scanner, data miner and RSA key-restore tools. Author: Einar Otto Stangvik / @einaros / https://hacking.ventures Since the cat is long since out of the bag, and others have begun publishing their tools, I'm putting mine out there too. Hopefully this...
heartbleed-proof-of-concept
Heartbleed CVE-2014-0160 Setup You will require docker in order to perform the setup. The exploit, dynamically generates the random bytes from the Client Hello message, therefore you will need to link the library when building the executable. The required package to be installed, in order to link...
CVE-2014-4210-SSRF-PORTSCANNER-POC
CVE-2014-4210 SSRF PORTSCANNER PoC Author: Aaron Mizrachi unmanarc [email protected] Twitter: https://twitter.com/unmanarc License: LGPLv3 Liability / Legal Disclaimer This project is made for EDUCATIONAL and ETHICAL TESTING purposes ONLY. Using of source code in this repository for attackin...
shellshock
shellshock Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock CVE-2014-6271 & CVE-2014-7169 vulnerabilities in Bash environments. Installation: Clone the repository: git clone https://github.com/ajansha/shellshock.git Navigate to the directory...
WebLogic-SSRF_CVE-2014-4210
WebLogic-SSRFCVE-2014-4210 Script de explotación de SSRF CVE-2014-4210 en Weblogic SearchPublicRegistries basado en Python3 Uso argumentos opcionales: -h, --help muestra este mensaje de ayuda y sale -u U URL objetivo única -uf UF Lee URLs desde un archivo -p P Escanea solo los puertos especificad...
pentesting-obioba
pentesting-obioba Black box pentesting: Shellshock CVE-2014-6271 + Log4Shell CVE-2021-44228. Root escalation. Executive and technical report Pentesting Obioba — Security Audit Black Box Project of the 360° Cybersecurity Bootcamp by The Bridge Digital Talent Accelerator 2025-2026. 🎯 Objective...