85152 matches found
zerologon
CVE-2020-1472 aka Zerologon Exploit POC What is it? NetLogon MS-NRPC, can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers. Notes: DC will be semi broken while password is zero'ed out, however this...
aioScan_CVE-2020-0796
aioScanCVE-2020-0796 Preface Based on the public POC, using coroutines greatly improves detection speed, making it convenient for operations colleagues to quickly scan the internal network. Affected Versions Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for x64-based Systems...
CVE-2020-14882
CVE-2020-14882 CVE-2020-14882/14883/14750 USE 1. clone this repo 2. install requests lib 3. python3 14882.py E.G λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator reference https://github.com/jas502n/CVE-2020-14882...
CVE-2020-16898--EXP-POC
CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html POC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as administrator Powershell.exe -ExecutionPolicy UnRestricted -File...
pulse-secure-vpn-mitm-research
pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process. Alyssa Herrera, Justin Wagner, and Mimir, and...
CVE-2020-0796-Checker
CVE-2020-0796-Checker Script that checks if the system is vulnerable to CVE-2020-0796 SMB v3.1.1 LINUX USAGE: sudo apt-get install nmap chmod +x CVE-2020-0796-Checker.sh bash CVE-2020-0796-Checker.sh -t TARGET-IP...
SMBGhost_RCE_PoC
SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my lab environment. It was written quickly and needs some work to be more reliable. Sometimes you BSOD. Using this for any purpose other...
MiniPlasma-Runner
MiniPlasma-Runner Modified version of Nightmare-Eclipse/MiniPlasma CVE-2020-17103 adapted for C2 usage. Original PoC runs from disk only. This version runs entirely from memory via execute-assembly, with a split-binary approach to avoid detection. Disclaimer This tool is provided for authorized...
CVE-2020-0022
CVE-2020-0022 Many thanks to Insinuator for their amazing blog post and code! Results All the steps mentioned in the insinuator post have been completed, and more. These are a lot of steps to put in a README.md file, so feel free to check out the post from Insinuator mentioned above. The exploit ...
CVE-2020-8515-PoC
CVE-2020-8515-PoC CVE-2020-8515-PoC...
CVE-2020-2883
CVE-2020-2883 First clone the framework git clone https://github.com/Y4er/CVE-2020-2555 Then place CVE20202883.java into the src/com/supeream/CVE20202883.java directory Import into IDEA and run CVE20202883.java for RCE! Screenshot...
CVE-2020-9547
CVE-2020-9547：FasterXML/jackson-databind Remote Code Execution Vulnerability...
CVE-2020-0796-LPE-EXP
CVE-2020-0796-LPE-EXP Windows SMBv3 LPE exploit compiled version Source project from: https://github.com/danigargu/CVE-2020-0796 Compilation environment: Win10 1909, VS2019 Tested x64 version Exp, x86 version not tested due to lack of environment...
CVE-2020-3580
CVE-2020-3580 Automated Scanner CVE-2020-3580 - Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software XSS. Usage ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 place domains/IP that you need to scan as .txt file format in th...
f5-bigip-rce-cve-2020-5902
F5 BIG-IP RCE CVE-2020-5902 Vulnerability Detection Tool Summary On 20200706, the F5 BIG-IP TMUI RCE vulnerability was disclosed online. The TMUI component Traffic Management User Interface of F5 BIG-IP has an authentication bypass vulnerability. This vulnerability arises from a difference betwee...
mtk-su-reverse-cve-2020-0069
mtk-su just some of my notes String table get decompressed string table by using binwalk -Xe stringtabledump dump from address in idb 0x1F098 compressed size: 1260 if you want the idb open an issue with your email and i'll send it. it's a good starting point if you want to re-write the exploit...
CVE-2020-14947
CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...
cve-2020-25540
ThinkAdmin Unauthorized Directory Listing/Arbitrary File Read cve-2020-25540 Usage python3 cve-2020-25540.py url...
WSuspicious
WSuspicious Summary This is a proof of concept program to escalate privileges on a Windows host by abusing WSUS. Details in this blog post: https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/ It was inspired from the WSuspect...