1304344 matches found
PoC
Leveraging CVE-2018-19788 to dump protected files without root shell CVE-2018-19788 is an issue where any user with a UID over INTMAX IE 4000000000 can run any systemctl command on a systemd linux box, such as Ubuntu. There is already a writeup to gain a root shell found: here. The main differenc...
CVE-2023-29357-ExE
CVE-2023-29357-ExE Recreation of the SharePoint PoC for CVE-2023-29357 in C from LuemmelSec Usage: root@kitploit: CVE-2023-29357.exe https://yoursharepoint.lol -v...
JavaDeserialization
Java Deserialization Vulnerability Scanner A Java deserialization vulnerability scanner for vulnerabilities similar to CVE-2017-10271. This project currently contains only one PoC; others have not been organized yet. Installation 1. Install nmap https://nmap.org/download.html Download the...
CVE-2024-21762-Checker
CVE-2024-21762-Checker This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses. For more information, see this Bishop...
linux-4.19.72_CVE-2023-0386
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
Intel-CVE-2015-2291
Intel-CVE-2015-2291 PoC exploit for CVE-2015-2291 Data-only attack to pop a system shell with the vulnerable intel driver. The code itselfs implements more "functionality" provided from the driver, like physical to virtual address translation, mapping physical memory This two combined = arbitrary...
CVE-2018-10933-libSSH-Authentication-Bypass
libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...
VulnReach
VulnReach SCA consciente del runtime: demuestra qué CVEs son realmente alcanzables, no solo instaladas. VulnReach es ahora unProyecto OWASP oficial. 🎉 Demo Paso 1: el SCA detecta 74 CVEs en las dependencias Paso 2: VulnReach demuestra cuáles son realmente alcanzables...
CVE-2020-5902
CVE-2020-5902 POC...
jenkins-cve-2016-0792
Jenkins CVE-2016-0792 Exploit para la vulnerabilidad de serialización de Jenkins - CVE-2016-0792 Base de datos de exploits https://www.exploit-db.com/exploits/42394/ Más información aquí 1. Contrast Security 2. Pentester Lab Requisitos 1. Python 3.6.x 2. La librería requests es necesaria para que...
CVE-2024-48990-Exploit
CVE-2024-48990 Exploit My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on my blog. Essentially, you can git clone this repository into an attacker-controlled directory, export PYTHONPATH=, and then run main.py with that PYTHONPATH value...
CVE-2018-5146
CVE-2018-5146 's exp and poc poc.ogg ：self-constructed poc file cve-test2.html ：exploit file crctest.exe：calculate the crc32 of the ogg file...
CVE-2022-30190
CVE-2022-30190 IMPORTANTE Parcheado a partir de: Actualizaciones de seguridad del 14 de junio de 2022 Informe CVE El archivo HTML debe servirse al objetivo, por ejemplo exploit.html Una forma sencilla de ejecutar el ataque es ejecutando server.py...
CVE-2021-44731-snap-confine-SUID
CVE-2021-44731-snap-confine-SUID Local Privilege Escalation Exploit for CVE-2021-44731, snap-confine 2.54.2 and lower All credit to Qualys for finding this and providing a detailed exploit. https://www.qualys.com/2022/02/17/cve-2021-44731/oh-snap-more-lemmings.txt Quick and Dirty snap-confine LPE...
CVE-2024-31317-Deployer
CVE-2024-31317 Deployer 🔒 安全研究声明 本项目仅用于安全研究和教育目的。使用本工具进行未经授权的测试是非法的。作者不对任何滥用或损害负责。 📋 概述 CVE-2024-31317 是一个影响 Android 9 至 Android 13 设备的严重安全漏洞，允许具有 WRITESECURESETTINGS 权限的应用程序通过命令注入获得系统级权限执行。 本项目提供了该漏洞的详细技术分析、概念验证代码以及自动化部署工具。 ✨ 主要特性 📱 支持 Android 9-13 全版本 🛠️ 自动化部署脚本 🔄 反向 Shell 连接 📊 详细的技术文档 🎯 模块化设计 🐛...
nuclei-wordfence-cve
Nuclei + Wordfence = ♥ 77,636 个用于 WordPress 安全扫描的 Nuclei 模板 🥳 让你的 WordPress 安全水平更上一层楼！本项目汇集了海量全新的 Nuclei 模板，用于 WordPress 扫描。扫描核心（Core）、插件和主题中的弱点——全部基于 Wordfence.com 的最新情报。 为什么说它是你的新好朋友： 海量模板库 ：无需再四处寻找单个模板，整个武器库尽在你的指尖。 始终与时俱进 ：这些模板会随最新威胁持续更新，让你永远不会落后于形势。 开源魔法 ：需要针对特定场景调整模板？没问题，你拥有完全的控制权。 如果你正在守护...
Windows_AFD_LPE_CVE-2023-21768
CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f 复现文章:hlingxbm For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the...
CVE-2025-24813
This repository does not have a README...
cve-2024-3094-detect
CVE-2024-3094-detect XZ Utils Vulnerability Check and Downgrade Script This script is designed to check the version of XZ Utils installed on your Linux system and downgrade it to a safe version if necessary. It also detects the Linux distribution and the package manager used. Features Checks the...