CVE-2016-0846-PoC

CVE-2016-0846-PoC...

PSSRoot

One-Click-Root program based on CVE-2016-5195 or "DirtyCOW"; this should work with the PlayStation Certified devices, but it may come in handy for other old android devices too; Tested on : Xperia Play Android 2.3; Kernel 2.6.32.9 Xperia S Android 4.1.2; Kernel 3.4.0+1.0.21100-313065 Sony Tablet ...

CVE-2016-2098

CVE-2016-2098 CVE-2016-2098 POC...

cve-2016-9838

CVE-2016-9838 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-9838 Image author: https://github.com/cved-sources/cve-2016-9838...

initroot

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...

dirtycow-replacer

PLEASE NOTICE I AM NOT FORMALLY TESTING THIS CODE IT IS BEING DESIGNED AS AN EDUCATIONAL TOOL What's it do? android-dirtycow-replacer uses the CVE-2016-5195 dirtycow exploit to patch a list of over 1000 files. You can edit it to be 10000 but 1000 should do. It checks first to make sure the files...

OpenSSL-1_0_1g_CVE-2016-0702

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

cve-2016-8870

CVE-2016-8870 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-8870 Image author: https://github.com/Medicean/VulApps/tree/master/j/joomla/1...

IOFireWireFamily-overflow

IOFireWireFamily-overflow IOFireWireFamily-overflow is a proof-of-concept exploit for CVE-2016-7608, a buffer overflow in IOFireWireUserClient that was fixed in macOS Sierra 10.12.2. This vulnerability can be triggered to cause denial of service or possibly arbitrary code execution on devices wit...

NDAY_CVE_2016_8823

NDAYCVE20168823 PoC under work, CVE-2016-8823...

VIKIROOT

VIKIROOT This is a CVE-2016-5195 PoC for 64-bit Android 6.0.1 Marshmallow perhaps 7.0 ?, as well as an universal & stable temporal root tool. It does not require a SUID executable or any filesystem changes. Features SELinux bypass see below for details. Memory-only: does not modify the filesystem...

spb

spb Shortest Path Bridging vulnerability testing scripts used to find CVE-2016-2783...

CVE-2016-0752

Exploiting CVE-2016-0752 This app serves as a vulnerable Proof of Concept for exploiting CVE-2016-0752. For more information refer to this blog post, which explains the vulnerability, the steps required to exploit, the fix, and a link to a metasploit module. Getting Started echo ""...

CVE-2016-7255

CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...

MS16-051-poc

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE 11. Write-up https://www.deamwork.com/archives/patch-analysis-of-cve-2016-0189.orz6 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2...

foxpwn

Foxpwn Proof-of-Concept exploit for CVE-2016-9066. Find a detailed writeup here...

CVE-2016-3088

Apache ActiveMQ PUT RCE One-Click GetShell usage:python3 CVE-2016-3088.py -u https://tartget.com/...

CVE-2016-3510

CVE-2016-3510...

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10.11.5 and iOS 9.3.2. The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function...

wp-mail-masta-exploit

WordPress Plugin Mail Masta 1.0 - CVE-2016-10956 Exploit This script exploits the CVE-2016-10956 vulnerability in WordPress Plugin Mail Masta 1.0 to extract credentials from wp-config.php. How to Use 1. Clone the repository: git clone https://github.com/Hakchoven/wp-mail-masta-exploit.git 2...