CRIME-poc

CRIME-poc هجوم CRIME: هو هجوم أوراكل ضغط CVE-2012-4929 اكتشفه جوليانو ريتزو وتاي دونغ؛ في هجوم أوراكل الضغط، يمكن أن يؤدي استخدام ضغط البيانات التكيفي على مزيج من النص الصريح المختار والنص الصريح غير المعروف إلى تغييرات حساسة للمحتوى في طول النص المضغوط يمكن اكتشافها حتى وإن كان محتوى النص المضغو...

CVE-2012-1889

CVE-2012-1889 यहाँ मैंने CVE-2012-1889 भेद्यता के शोषण का उपयोग करने के लिए सीखने के लिए फ़ाइलें रखी हैं root@kitploit: 1.txt पहला मॉड्यूल जानकारी 2.txt दूसरा मॉड्यूल जानकारी c2javascript.c C भाषा के shellcode को JavaScript रूप में बदलने के लिए cve-2012-1889.html भेद्यता शोषण वेब पेज...

CVE-2012-5106

CVE-2012-5106...

Open-Worldwide-Application-Security-Project-OWASP-

ओपन-विश्वव्यापी-एप्लिकेशन-सुरक्षा-परियोजना-OWASP- DVWA का स्वचालित वेब भेद्यता मूल्यांकन OWASP ZAP का उपयोग करके दूरस्थ कोड निष्पादन CVE-2012-1823 जैसी महत्वपूर्ण सुरक्षा कमजोरियों की पहचान और विश्लेषण करने के लिए।...

UDFPwn-CVE-2012-5613

UDFPwn.py MySQL 4.x/5.0 Linux - Script d'automatisation de la bibliothèque dynamique 2 de fonctions définies par l'utilisateur UDF...

CVE-2012-2982

CVE-2012-2982 उर्फ /file/show.cgi Remote Command Execution CVE-2012-2982 का एक सरल poc...

CVE-2012-5575

Questo repository non contiene un README...

CVE-2012-2688

Questo repository non contiene un README...

RDP_jammer

RDPjammer CVE-2012-0152-Exploit mit Metasploit und BASH Syntax : Script.sh...

-CVE-2012-2661-ActiveRecord-SQL-injection-

-CVE-2012-2661-ActiveRecord-SQL-injection- Resoconto lingua malese...

cve-2012-3137

Dieses Repository hat keine README-Datei...

root-zte-open

root-zte-open exploit per CVE-2012-4220 funzionante su zte-open Advisory originale: https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 Exploit originale: https://github.com/hiikezoe/breaksetresuid Compilazione root@kitploit...

rails-cve-2012-5664-test

Rails CVE-2012-5664 demo della vulnerabilità Questa applicazione dimostrativa mostra come funziona la vulnerabilità Rails CVE-2013-5664. Maggiori informazioni: http://blog.phusion.nl/2013/01/03/rails-sql-injection-vulnerability-hold-your-horses-here-are-the-facts...

CVE-2012-2122-Home-Lab

CVE-2012-2122 MySQL Authentication Bypass Home Lab Este laboratório demonstra a vulnerabilidade CVE-2012-2122 - MySQL Authentication Bypass Causada por um erro na comparação de senhas em MySQL versão 5.5.23 ou inferior. Quando o atacante envia uma senha errada repetidamente, o MySQL pode permitir...

cve-2024-4577-lab

CVE-2024-4577 — Iniezione di Argomenti PHP-CGI → RCE Laboratorio Docker / CTF Un laboratorio Docker autonomo, creato da zero , che dimostra la primitiva reale di iniezione di argomenti → Esecuzione Remota di Codice alla base di CVE-2024-4577. Sfruttalo su http://localhost:8080, ottieni una shell ...

o5logon-fetch

o5logon-fetch Un piccolo programma Java che tenta di sfruttare la vulnerabilità CVE-2012-3137 su server Oracle 11 vulnerabili. Sfruttando questa vulnerabilità, è possibile eseguire attacchi offline di forza bruta fino a scoprire la password di un determinato utente, senza lasciare tracce evidenti...

CVE-2012-2982-Python-PoC

CVE-2012-2982-Python-PoC Questo è stato convertito da un modulo metasploit come esercizio per lo studio dell'OSCP. È nato dalla frustrazione per l'assenza di exploit pubblici da usare manualmente per la macchina Gamezone di TryHackMe. Ho analizzato il codice di metasploit e l'ho convertito in...

ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting

Multiple cross-site scripting vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

WordPress Integrator 1.32 - Cross-Site Scripting

A cross-site scripting vulnerability in wp-integrator.php in the WordPress Integrator module 1.32 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirectto parameter to wp-login.php. id: CVE-2012-5913 info: name: WordPress Integrator 1.32 - Cross-Site Scripti...

WordPress Plugin Download Monitor < 3.3.5.9 - Cross-Site Scripting

A cross-site scripting vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dlsearch parameter to the default URI. id: CVE-2012-4768 info: name: WordPress Plugin Download Monitor 3.3.5.9 - Cross-Site...