1308540 matches found
vmware_vcenter_cve_2020_3952
CVE-2020-3952の概念実証 これは、CVE-2020-3952を悪用する短いコードです。この脆弱性の詳細は、Guardicore Labsの記事（こちら）で説明されています。 この脆弱性は、2020年4月にVMwareによって公開され、CVSSスコア最大10.0と評価されました。ネットワーク接続を持つ攻撃者がvCenterディレクトリ（ひいてはvSphereデプロイ）を制御できるようになります。 VMwareはこのバグの修正をvCenter Server 6.7 Update 3fでリリースしました。以前のバージョンからアップグレードされたパッチ未適用のvCenter...
CVE-2024-50623-poc
CVE-2024-50623-poc python poc.py --host http://192.168.0.1:8983...
CVE-2021-44228_scanner
File system scanner for CVE-2021-44228 Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested. find-class-files – Clojure implementation should be able to run nearly anywhere Java can run, assuming there's enough disk space. Given a set of file system...
netgear_r6700v3_circled
Exploiting a Stack Buffer Overflow on the NETGEAR R6700v3 CVE-2022-27646 with the Help of Symbolic Execution Introduction This repository is intended to demonstrate some functionalities of Morion, a proof-of-concept PoC tool to experiment with symbolic execution on real-world ARMv7 binaries. We...
CVE-2023-0297
CVE-2023-0297 Unauthenticated Remote Code Execution in PyLoad 0.5.0b3.dev31 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit...
CVE-2022-0265
CVE-2022-0265 Put ysoserial.jar in the same directory. example python CVE-2022-0265.py 127.0.0.1 URLDNS "http://xxx.log."...
CVE-2017-5638_struts
I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...
icu-74-debian
icu-74-debian Debian build files for icu 74.2 with a patch to fix CVE-2025-5222 You need to download and extract icu74.2.orig.tar.gz to set up your source tree. Clone this repo somewhere with the following command :- root@kitploit: git clone https://github.com/berkley4/icu-74-debian Copy the debi...
Embarcadero-Workaround
What is Embarcadero Workaround ? This is an unofficial "patch" for "Embarcadero VCL Library Stack/Heap Overflow" CVE-2014-0993 and CVE-2014-0994. Which Software versions does this workaround support? 32-bit software compiled with Delphi and C++ Builder where the "VCL library" was included, as lon...
Deathnote
Deathnote Proof of Concept of CVE-2022-30190 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling...
IMAGE-MAGICK-CVE-2022-44268
IMAGE-MAGICK-CVE-2022-44268...
vaas-cve-2014-6271
脆弱性 as a Service - CVE 2014-6271 脆弱なバージョンのbashを搭載したDebian Buster Linuxシステムと、CVS-2014-6271（別名Shellshock）を実演するWebアプリケーションです。 概要 このDockerコンテナはDebian Busterをベースにしており、脆弱なバージョンのBash（bash4.2:2b:dfsg-0.1）を使用するように変更されています。 Apache 2を介してWebアプリケーションが利用可能で、シェルコマンドを実行するCGIスクリプトを提供します。 使用方法 コンテナをインストールするには、dock...
Search-log4Jvuln-AppScanSTD
Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...
poc-cve-2026-32255
Kan SSRF via Attachment Download CVE-2026-32255 - Proof of Concept This repository contains a proof of concept POC for CVE-2026-32255 , a high-severity Server-Side Request Forgery SSRF vulnerability in Kan , an open-source project management tool. The vulnerable endpoint allows unauthenticated...
CVE-2023-4165
CVE-2023-4165 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u 单个url目标文件 python3 CVE-2023-4165.py -f url.txt Then verify the address...
pwnkit-go
Pwnkit-go This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go Give it a try: root@kitploit: create a vulnerable vagrant machine $ make vm ... build the binary and scp it to the vagrant box $ make scp ssh onto the vagrant box $ make ssh The default user is "vagrant...
exploit-CVE-2023-51385
exploit-CVE-2023-51385...
CVE-2025-6554
This repository does not have a README...
hook
amalmurali47/hook このリポジトリは、git clone 操作中に RCE を引き起こす Git の脆弱性 CVE-2024-32002 を悪用する PoC の一部です。このリポジトリには、エクスプロイトで使用される悪意のあるフックが含まれています。 概要 詳細な手順とエクスプロイトの仕組みについては、gitrce リポジトリ またはブログ記事 https://amalmurali.me/posts/git-rce を参照してください。 免責事項...