CVE-2019-14287-

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...

dameflare

DameFlare Unauthenticated RCE via Smart Card Authentication Bypass in SolarWinds Dameware MRC CVE-2019-3980 | CVSS 9.8 Critical | TCP/6129 Original research and POC: Tenable, Inc. TRA-2019-43 Python 3 tool: David Boyd @Fir3d0g How It Works Dameware MRC exposes a remote control service DWRCS.exe o...

CVE-2019-3396

This repository does not have a README...

Webmin_1.890-POC

Webmin 1.890 expired Remote Root CVE-2019-15107 Webmin version 1.890 was released with a backdoor that could allow anyone with knowledge of it to execute commands as root. Versions 1.900 to 1.920 also contained a backdoor using similar code, but it was not exploitable in a default Webmin install...

mysqli

MySQLi.py - Time-Based Blind SQL Injection for MySQL MySQLi.py is a personal practice project, inspired by Exploit-DB exploit 46635, used during the SimpleCTF room on TryHackMe. What caught my attention in the original exploit was its ability to extract credentials and even crack the password has...

ctf-cve-2019-11043

Task Management APP CVE-2019-11043 Lab Minimal PHP app with intentionally vulnerable Nginx/PHP-FPM setup for reproducing CVE-2019-11043. Includes a tiny task manager, login/admin, and DB config UI. Build & Run Docker root@kitploit: build docker build -t cve-2019-11043-lab:app . run docker run --r...

CVE-2019-16113

This repository does not have a README...

pacpoc

PACPoC: A local PoC exploit for CVE-2019-2205 To try out this exploit install the "malicious" app PacTest.apk and make exploit.pac available over http with, for example python -m SimpleHTTPServer. Then go to proxy settings on an Android device, select proxy autoconfig, and enter the URL to...

update-apt-package

Playbook update APT packege because CVE-2019-3462...

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability root@kitploit: USAGE: python3 CVE-2019-11510.py...

CVE-2019-0708-poc

CVE-2019-0708-poc CVE-2019-0708 Remote Code Execution Vulnerability Batch Detection 3389hosts is a list of IP addresses to be detected, one per line pool = ThreadPool10 is a custom scanning thread count Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be detecte...

CVE-2019-6447-Android-Vulnerability-in-ES-File-Explorer

CVE-2019-6447-Android-Vulnerability-in-ES-File-Explorer This repository is developed to understand CVE-2019-6447...

vbull

vBulletin Mass Exploit CVE-2019-16759 Alert! This tool was made for penetration testing CVE-2019-16759. We are not responsible for errors made by users of this tool. Installation and usage: $ pkg install git python2 $ pip2 install requests $ git clone https://github.com/psychoxploit/vbull $ cd...

14-828_Exploitation_of_CVE-2019-5822

This repository does not have a README...

CVE-2019-5413-NetBeans-NoJson

NetBeans NetBeans CVE-2019-5413 NetBeans...

CVE-2019-5413-NetBeans

NetBeans NetBeans CVE-2019-5413 NetBeans...

saleemrashid-sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...

Modified-CVE-2019-15107

CVE-2019-15107 Make sure to manually change shellperl LHOST and LPORT on line 29 before execution. Modified from: https://github.com/ketlerd/CVE-2019-15107...

CVE-2019-17221

This repository does not have a README...