log4j2_dos_exploit

Descripción autor: 我超怕的 blog: https://www.cnblogs.com/iAmSoScArEd/ github: https://github.com/iAmSOScArEd/ fecha: 2021-12-20 log4j2 dos exploit script de explotación de log4j2 dos CVE-2021-45105 Exploit Script de explotación de CVE-2021-45105 Modo de uso Inglés： root@kitploit: Log4j2dos.py -u -m ...

rootkit

Linux Rootkit A simple Linux kernel rootkit written for fun, not evil. Functionality The rootkit can do the following: Grant root privileges to a userland process Hide process by PID Unhide a previously hidden process by PID Hide files or directories by their name Unhide previously hidden files o...

rootkit

Rootkit de Linux Un rootkit simple para el kernel de Linux, escrito por diversión, no por maldad. Funcionalidad El rootkit puede hacer lo siguiente: Otorgar privilegios de root a un proceso en espacio de usuario Ocultar procesos por PID Revelar un proceso previamente oculto por PID Ocultar archiv...

cve-2024-6387_AImade

Presentation of the Test Code for CVE-2024-6387 Introduction This document presents a Python script designed to test the vulnerability CVE-2024-6387, identified in OpenSSH. This vulnerability is a race condition in the SIGALRM signal handler that can allow remote code execution RCE on glibc-based...

CVE-2023-25292

CVE-2023-25292 Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie Vulnerability Details Product: Group Office Application Version: 6.6.145 Vulnerability Type:...

reposcanner

Reposcanner Reposcanner es un script en Python para buscar a través del historial de commits de repositorios Git cadenas interesantes como claves API, inspirado en truffleHog. Instalación El módulo Git de Python es necesario python3-git en Debian. Docker root@kitploit: docker build -t reposcanner...

CVE-2021-39165

CVE-2021-39165 Python3 POC for CVE-2021-39165 in CachetHQ Usage First of all, you should install the dependencies: root@kitploit: pip3 install -r requirements.txt If you want to check whether the victim URL is vulnerable or not, you can execute: root@kitploit: python3 exploit.py -u -c If you want...

CVE-2024-5737

CVE-2024-5737 AdmirorFrames Joomla! Extension HTML tag: root@kitploit: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

CVE-2024-34225

Computer Laboratory Management System using PHP and MySQL 1.0 Submitter: Kha Do Vulnerability Cross Site Scripting Description Cross Site Scripting vulnerability in php-lms/admin/?page=systeminfo in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject...

Telstra-Cybersecurity-Virtual-Experience-

Telstra-Cybersecurity-Virtual-Experience-Program I participated in Telstra's Security Operations Centre as an Information Security Analyst to gain first-hand experience of the daily tasks and responsibilities of a Security Analyst at Telstra. The tasks carried out: 1. Triaged a malware attack...

CVE-2025-10035

CVE-2025-10035 How does this detection method work? Detects vulnerable GoAnywhere MFT instances by extracting version numbers from the login page and matching against affected version ranges. How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run t...

CVE-2022-25063

CVE-2022-25063 This script exploits a vulnerability XSS in the TPLink WR840N router, using a field for injecting javascript code...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4JExploitation-VulnerabiliyCVE-2021-44228. introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j. CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact. the...

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

CVE-2024-4577

CVE-2024-4577: Critical Vulnerability in PHP's CGI Configurations A severe security flaw exists in PHP's CGI mode that allows attackers to run arbitrary commands by manipulating URL parameters. Impacted Versions PHP versions before 7.4.29 and 8.0.19 on Windows running php-cgi. Attack Methodology...

domato

Domato 🍅 A DOM fuzzer Written and maintained by Ivan Fratric, [email protected] Copyright 2017 Google Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License ...

CVE-2020-0796

CVE-2020-0796 Remote Code Execution POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access. Intended only for educational and testing in corporate environments. ZecOps...

etherleak-checker

Etherleak Vulnerability Checker This Python script helps to detect the Etherleak CVE-2003-0001 vulnerability on a target host by analyzing the padding data in network packets. The script uses Scapy to send various types of requests ICMP, ARP, or TCP and checks if the responses contain any padding...

Reconnoitre

Una herramienta de reconocimiento creada para los laboratorios OSCP para automatizar la recopilación de información y la enumeración de servicios mientras crea una estructura de directorios para almacenar resultados, hallazgos y exploits utilizados para cada host, comandos recomendados para...