CVE-2019-2725

이 저장소에는 README가 없습니다...

CVE-2019-8641-reproduction

CVE-2019-8641 재현 이것은 교육 목적으로만 제공되는 CVE-2019-8641 재현 코드입니다!...

qu1ckr00t

qu1ckr00t PoC-приложение, демонстрирующее возможности произвольного чтения/записи R/W в ядре Android CVE-2019-2215. Разбор: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t — это ПРОТОТИП PROOF OF CONCEPT. Его НЕ следует использовать на вашем личном устройстве ...

1CRM-CVE

1CRM-CVE Уязвимость программного обеспечения 1CRM Список уязвимостей CVE-2019-14221: Хранимая межсайтовая подделка сценариев Stored Cross Site Scripting...

raptor_infiltrate19

raptorinfiltrate19 "Иногда взлом — это просто когда кто-то тратит на что-то больше времени, чем кто-либо другой мог бы разумно ожидать." -- Джерри Гамблин Этот репозиторий содержит все материалы, связанные с моим докладом "A bug's life: story of a Solaris 0day" на INFILTRATE19 2 мая 2019 года...

Rails-doubletap-RCE

Rails-doubletap-exploit RCE no Rails 5.2.2 usando um path traversal CVE-2019-5418 e uma desserialização de objetos Ruby CVE-2019-5420 Análise Técnica : CVE-2019-5418 - https://github.com/mpgn/CVE-2019-5418 CVE-2019-5420 - https://hackerone.com/reports/473888 Aviso de Segurança : CVE-2019-5418 -...

rdpscan

rdpscan para a vulnerabilidade BlueKeep CVE-2019-0708 Este é um scanner rápido e sujo para a vulnerabilidade CVE-2019-0708 no Remote Desktop da Microsoft. Neste momento, existem cerca de 900.000 máquinas na Internet pública vulneráveis a esta vulnerabilidade, portanto, é de se esperar que em brev...

urgent11-detector

urgent11-detector urgent11-detector è uno strumento per rilevare se un dispositivo esegue lo stack TCP/IP Interpeak IPnet e quindi è a rischio delle vulnerabilità URGENT/11. Motivazione Alla luce delle recenti scoperte vedi https://armis.com/urgent11, abbiamo deciso di sviluppare uno strumento...

Homework-of-Python

Homework-of-Python Python-Codes meines Blogs. pptppasswordhack.py Verwendet Brute-Force-Angriffe, um das Passwort des PPTP-VPN zu ermitteln. Es liest die Passwörter aus einer Datei namens wordlist und verwendet dann pptpsetup, um eine Verbindung zum Server herzustellen. Das Zeitintervall beträgt ...

CVE-2019-0708

Strumento di rilevamento batch della vulnerabilità remota 3389 di Microsoft CVE-2019-0708 0x001 Rilevamento su Windows root@kitploit: https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 . 2019/06/02 02:11 .. 2019/06/02 01:55...

CVE-2019-7609

CVE-2019-7609 Nuovo CVE-2019-7609 che funziona con python 13 exploit CVE-2019-7609kibana RCE nel modo corretto tramite script python3 Riferimento: https://github.com/LandGrey/CVE-2019-7609 istantanea utilizzo root@kitploit: usage: python3 CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -po...

cve-2019-15107

Python-Nutzung root@kitploit: python cve-2019-15107.py -t https:// -c cmd...

ZimbraExploit

ZimbraExploit K8Cscan invoca l'exploit GetShell per la vulnerabilità di esecuzione di codice remoto su Zimbra 8.8.11 https://www.cnblogs.com/k8gege/p/10822908.html CVE-2019-9621 Zimbra8.8.11 XXE GetShell Exploit...

CMS-made-simple-sqli-python3

CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - SQL Injection riscritto per python3, CVE-2019-9053 Ho trovato problematico eseguire questo exploit su Kali Linux, poiché python2 non ha termcolor, quindi con poche modifiche l'ho fatto funzionare con python3. Tutto il merito va a:...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

fluffi

FLUFFI FLUFFI - Un fuzzer binario evolutivo distribuito per penetration tester. Informazioni sul progetto Panoramica di alto livello Tutorial per principianti Per iniziare Utilizzo HOWTOs Dettagli tecnici Contribuire a FLUFFI LICENZA Bug trovati Finora, FLUFFI è stato utilizzato quasi...

DecryptTeamViewer

DecryptTeamViewer Utilizza CVE-2019-18988 per enumerare e decifrare le credenziali di TeamViewer dal registro di Windows. Ricerca sulla vulnerabilità effettuata da Nic Losby. Post del blog che descrive la vulnerabilità: https://whynotsecurity.com/blog/teamviewer/ Utilizzo .\DecryptTeamViewer.exe...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

path-auditor

PathAuditor O PathAuditor é uma ferramenta criada para encontrar vulnerabilidades relacionadas a acesso a arquivos, auditando funções da libc. A ideia é basicamente a seguinte: Auditar cada chamada a funções da libc relacionadas ao sistema de arquivos realizadas pelo binário. Verificar se o camin...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...