54460 matches found
weblogic-XMLDecoder
This software is for learning and communication only, any illegal use is prohibited Weblogic-XMLDecoder-GUI CVE-2017-10352 A Python GUI experimental tool. Its main function is to exploit the deserialization vulnerability caused by Weblogic XMLDecoder. Developed for learning the Python tkinter...
spectre-meltdown-checker
Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list...
TomcatScanPro
TomcatScanPro README Version: 简体中文 Introduction This project is a weak password detection tool for Tomcat services. It supports multiple exploitation methods for CVE-2017-12615 vulnerability and integrates CNVD-2020-10487 Tomcat AJP protocol local file inclusion vulnerability exploitation...
HugeDirtyCowPOC
"Huge Dirty Cow" POC Un POC para la vulnerabilidad Huge Dirty Cow CVE-2017-1000405. Se pueden encontrar más detalles aquí. Antes de ejecutar, asegúrate de configurar las páginas enormes transparentes a "always": root@kitploit: echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...
Struts2-048
Struts2-048 CVE-2017-9791 Author: DragonEgg root@kitploit: def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...
CVE-2017-10271
CVE-2017-10271 WebLogic wls-wsat component deserialization vulnerability CVE-2017-10271 detection script Usage root@kitploit: $ python CVE-2017-10271 url You also need to register an account on ceye.io, and fill in the Identifier and API Token provided by it in the following part of the code:...
bash-CVE-2017-17562
bash-CVE-2017-17562 Una implementación de PoC en Bash para CVE-2017-17562. Requiere curl para elaborar peticiones HTTP. Basado en las implementaciones de Metasploit y @fssecur3. Argumentos Los siguientes argumentos deben configurarse ya que son necesarios para el reconocimiento y envío del payloa...
hikvision_CVE-2017-7921_auth_bypass_config_decryptor
hikvisionCVE-2017-7921authbypassconfigdecryptor Este archivo python descifrará el archivo de configuración utilizado por las cámaras hikvision vulnerables a CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Descripción Omisión de Autenticación en Cámara...
OptionsBleed-POC-Scanner
OptionsBleed-POC-Scanner OptionsBleed CVE-2017-9798 PoC / Scanner More information coming soon... Disclaimer This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems exce...
Stryker
Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...
Detect-CVE-2017-15361-TPM
Detecta Módulos de Plataforma de Confianza Vulnerables a CVE-2017-15361 Este repositorio proporciona contenido para ayudar a los administradores del DoD a detectar sistemas que tienen un Módulo de Plataforma de Confianza TPM habilitado que es vulnerable a CVE-2017-15361 y es un complemento del...
CVE-2017-9798
Check for CVE-2017-9798 This small script checks a shared hosting environment for CVE-2017-9798 and exits with a return code of 1 if a vulnerable .htaccess file has been found. Example usage root@kitploit: python check.py --path /var/customers/webs/...
tethr
Tethr Omisión de comprobación de aprovisionamiento de anclaje en Android CVE-2017-0554 Este es el repositorio de la aplicación de prueba de concepto Tethr que demuestra CVE-2017-0554 para omitir la comprobación de aprovisionamiento de anclaje en Android anterior a la versión 7.1.2. Publicación de...
CVE-2017-0248-Test
This repository does not have a README...
cdt-vulnsamba-deploy
CDT Team Delta - Vulnerable Samba Deployment Overview This repo is an Ansible-based deployment of a vulnerable Samba file server affected by CVE-2017-7494, a critical remote code execution vulnerability. This will hopefully be deployed for team Delta during the Grey Team phase. Vulnerability...
Blueborne-CVE-2017-1000251
Blueborne Un simple DoS de Bluetooth usando el exploit blueborne CVE-2017-1000251...
smm_usbrt_poc
UsbRt SMM Privilege Elevation This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5721 vulnerability. This PoC causes a system to be completely stuck because of Machine Check Exception occurred. All you need is CHIPSEC Framework installed. And don't forget to put...
apache-struts2-CVE-2017-5638
apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...
subpath-exploit
Sample Kubernetes Escape via CVE-2017-1002101 Description After hearing about the issue and following this guide, I wanted to explore things a bit more. This repo contains a couple pod deployments and helper shell scripts that demonstrate the attack mechanism in the simplest way possible so that...