75376 matches found
zerologon-poc
zerologon-poc A script to exploit CVE-2020-1472 Zerologon Not my research. I just wrote a PoC based on the brilliant work of other who discovered this vuln...
CVE-2020-27838
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2020-27838 Run bellow command to check CVE-2020-27838 -h Configurations 2. We integrated with the Telegram A...
CVE-2020-3452
CVE-2020-3452 Unauthenticated file read in Cisco ASA & Cisco Firepower Saikat Karmakar | Nov : 2021 This will test if the given host is vulnerable to CVE 2020-3452 or not Requirements: root@kitploit: requests termcolor Usage: root@kitploit: darklord@kali: python3 cve-2020-3452.py -h usage:...
zabbix-template-CVE-2020-1472
zabbix-template-CVE-2020-1472 Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event ID's 5827, 5828 & 5829. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472...
CVE-2020-1938-Tomcat-AJP-Ghostcat--Analysis
CVE-2020-1938 Tomcat AJP Ghostcat Analysis This repository contains a Markdown analysis report for CVE-2020-1938 Ghostcat and the image assets used in the report. Contents Report: docs/report/CVE-2020-1938-Analysis-Report.md Images: docs/images Report Scope The report is organized around:...
linux-4.19.72_CVE-2020-14356
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
Zerologon_CVE-2020-1472
Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...
zerologon
CVE-2020-1472 aka Zerologon Exploit POC What is it? NetLogon MS-NRPC, can establish inter-domain control vulnerable security channel. It's possible to zero out the password for the machine account on domain controllers. Notes: DC will be semi broken while password is zero'ed out, however this...
CVE-2020-11981-PoC
Example Build demo stand root@kitploit: docker-compose up -d VM docker-container: 172.18.0.2 Command PoC root@kitploit: docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt INFO Vulnerabili...
CVE-2020-0688
CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: root@kitploit: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python...
CVE-2020-1350-SigRed
This repository does not have a README...
CVE-2020-9484
CVE-2020-9484...
CVE-2020-5902
This repository does not have a README...
CVE-2020-3452
This repository does not have a README...
SmartAsset-SQLinj-CVE-2020-26525
SmartAsset-SQLinj-CVE-2020-26525 Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. Smart Asset - version 2020.7 CVE-2020-26525 ========================== HTTP Request: GET /API/api/Asset?assetCode=XXX-08-X-01-06-01&...
cve-2020-16898
Zeek Package for Bad Neighbor Detection .. image::...
linux-4.19.72_CVE-2020-10757
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
CVE-2020-0041
CVE-2020-0041 This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at...