ludus_xz_backdoor

Ansible Role: xz backdoor CVE-2024-3094 for Ludus An Ansible Role that installs the xz backdoor CVE-2024-3094 on a Debian host and optionally installs the xzbot tool. !WARNING This role deploys malware on purpose! Without exposing the host to the internet you should be safe, but it's still malwar...

CVE-2024-21514

CVE-2024-21514 PoC and Bulk Scanner Overview POC for CVE-2024-21514 : SQL Injection issue was identified in the Divido payment extension for OpenCart, which is included by default in version 3.0.3.9 This POC is create by M Ali and it's based on this Security Advisory by Snyk. How to Use Minimum...

CVE-2024-23897

Modifications by Anant File read for files like /etc/os-release was stripping content. this is fixed now Added support for Authenticated session : provide username and password as commandline arguments usage: jenkinsfileread.py -h -u URL -a USERAGENT -f FILE -t TIMEOUT -s -o -p PROXY -v --usernam...

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805CVE-2024-21887 The script in this repository checks and exploits CVE-2023-46805 Auth Bypass and CVE-2024-21887 Remote Code Execution vulnerabilities specified in the Ivanti Connect Secure product exist. You can check vulnerability details this link...

CVE-2024-4577

CVE-2024-4577 Argument injection vulnerability in PHP INSTALL git clone https://github.com/gotr00t0day/CVE-2024-4577.git cd CVE-2024-4577 pip3 install -r requirements.txt USAGE Scan A Target python3 CVE-2024-4577.py -t https://160.153.61.66/ -c "" Scan a list of Targets python3 CVE-2024-4577.py -...

CVE-2024-32640-SQLI-MuraCMS

Muraider - Automating the detection & Exploitation of CVE-2024-32640 \ SQLi in Mura/Masa CMS Usage Detection: python3 CVE-2024-32640.py --url https://target.com/ Ghauri Exploitation Pass '-g' or '--ghauri' as argument: Parse in any arguments that you wish to use with Ghauri, following their...

cve-2024-42327

cve-2024-42327 usage: cve-2024-42327.py -h -u URL -n USERNAME -p PASSWORD --example cve-2024-42327.py: error: the following arguments are required: -u/--url, -n/--username, -p/--password...

CVE-2024-9047-PoC

This script is only for authorized system testing. Please cite the source if referenced. For more PoCs, see https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Batch testing: python poc.py -f url.txt Single testing: python poc.py -u your-ip...

pdfjs-vuln-demo

PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...

FuguHub-8.4-Authenticated-RCE-CVE-2024-27697

FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Server Software. The version tested was the debian version at this link: https://fuguhub.com/articles/FuguHub-for-Debian An issue in Real Time Logic LLC FuguHub v.8.4 allows a local attacker to execute arbitrary code via a crafted script to t...

Tomcat-CVE-2024-50379-Poc

Tomcat-CVE-2024-50379-Poc !IMPORTANT For learning and exchange only, do not use for illegal purposes RCE through a race condition in Apache Tomcat reference: https://github.com/iSee857/CVE-2024-50379-PoC Demo Usage go run main.go -u http://localhost:8080/ Todo Detection mechanism for successful...

CVE-2024-23897

CVE-2024-23897 | Jenkins -p -f or python CVE-2024-23897.py -i -f Parameters: -t or --target: Specify the target IPs. Supports single IP, IP range, comma-separated list, or CIDR block. -i or --input-file: Path to input file containing hosts in the format of http://1.2.3.4:8080/ one per line. -o or...

LeakedWallpaper

Leaked Wallpaper This is a privilege escalation tool fixed with CVE-2024-38100 in KB5040434 that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user. Usage .\LeakedWallpaper.exe \\c$\1.jpg -downgrade Example...

Apache-OFBiz-Directory-Traversal-exploit

Apache-OFBiz-Directory-Traversal-exploit A vulnerability classified as critical, has been found in Apache OFBiz up to 18.12.12. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. The product uses external input to...

CVE-2024-27198-RCE

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" How to use I'm using Python3.9. pip install requests urllib3 faker python CVE-2024-27198-RCE.py -t http://192.168.198.173:8111 --behinder4...

dlink

Command Injection and Backdoor Account in D-Link NAS Devices Vulnerability Summary: The described vulnerability affects multiple D-Link NAS devices, including models DNS-340L, DNS-320L, DNS-327L, and DNS-325, among others. The vulnerability lies within the nassharing.cgi uri, which is vulnerable...

CVE-2024-35176

CVE-2024-35176 CVE-2024-35176 poc full...

Unauthenticated-Remote-Code-Execution-RCE---Poultry-Farm-Management-System-v1.0

Exploit Title: Unauthenticated Remote Code Execution RCE - Poultry Farm Management System v1.0 Date: 24-06-2024 CVE: CVE-2024-40110 EDB-ID: 52053 Exploit Author: Jerry Thomas w3bn00b3r Vendor Homepage: https://www.sourcecodester.com/php/15230/poultry-farm-management-system-free-download.html...

MS-SharePoint-July-Patch-RCE-PoC

MS-SharePoint-July-Patch-RCE-PoC PoC for: CVE-2024-38094 CVE-2024-38024 CVE-2024-38023 PoC Video: https://youtu.be/u8mccaakISw...

msiscan

MSI Analyzer This Python script for Linux can analyze Microsoft Windows .msi Installer files and point out potential vulnerabilites. It was developed by Michael Baer @derbaer0 in the SEC Consult Vulnerability Lab. Currently, it is mostly suited for a local privilege escalation also described in o...