edusrc_POC

This repository contains a collection of Python scripts, each designed to exploit vulnerabilities in various web applications. The scripts are written in Chinese and appear to be intended for use on Chinese-language systems. The scripts are categorized into several groups, each targeting a specif...

File upload vulnerability in the teaching resources service management platform of Wuhan Dongxin Tongbang Information Technology Co.

Teaching Resources Service Management Platform is a system based on B/S architecture, adopting the concept of multi-level platform design, with the core functions of educational resources aggregation, categorization and storage, regional sharing, etc., and supporting activities such as remote...

Solr-GRAB - Steal Apache Solr Instance Queries With Or Without A Username And Password

Steal Apache Solr instance Queries with or without a username and password. DISCLAIMER : This project should be used for authorized testing and educational purposes only. Download git clone https://github.com/GnosticPlayers/Solr-GRAB Usage You can search for Apache Solr Instances via Censys, with...

File Upload Vulnerability in Open Virtual Simulation Experimental Teaching Management Platform Software of Beijing Runier Network Technology Co.

Beijing Runier Network Technology Co., Ltd. is a national high-tech enterprise registered in Beijing Haidian Cultural and Educational Industrial Park based on virtual simulation technology and network technology, mainly engaged in the research, development, sales, integration and service of...

Exploit for Exposed IOCTL with Insufficient Access Control in Dell Dbutil

CVE-2021-21551 Exploit to SYSTEM for CVE-2021-21551 SpoolPrin...

GitLab Community Edition (CE) 13.10.3 - User Enumeration Exploit

Exploit Title: GitLab Community Edition CE 13.10.3 - User Enumeration Exploit Author: @4D0niiS https://github.com/4D0niiS Vendor Homepage: https://gitlab.com/ Version: 13.10.3 Tested on: Kali Linux 2021.1 !/bin/bash Colors RED='\03338;5;196m' GREEN='\e38;5;47m' NC='\0330m' BOLD='\e1m'...

Exploit for Cross-site Scripting in Moodle

Moodle CVE-2019-3810 Moodle 3.6.2, 3.5.4, 3.4.7, 3.1...

PwnLnX - An Advanced Multi-Threaded, Multi-Client Python Reverse Shell For Hacking Linux Systems

An advanced multi-threaded , multi-client python reverse shell for hacking linux systems. There's still more work to do so feel free to help out with the development. Disclaimer : This reverse shell should only be used in the lawful, remote administration of authorized systems. Accessing a comput...

Invoke-Stealth - Simple And Powerful PowerShell Script Obfuscator

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is an offensive tool for testing and demonstrating vulnerabilities in various software and systems. The primary purpose of Vulhub is to provide a simple and easy-to-use platform f...

Conti ransomware gang demanded $40m from US school district

By Habiba Rashid Broward County Schools district in Fort Lauderdale, FL was attacked by the infamous Conti ransomware group last month. In a series of ransomware attacks on educational institutions that have been going on for the past few weeks, this time around, Broward County Public Schools in...

Lazy-RDP - Script For AutomRDPatic Scanning And Brute-Force

Script For AutomRDPatic Scanning And Brute-Force. Demo Video: Lazy-RDP over SSH: Script for automatic scanning of the address list for the presence of open 3389 ports, and then selecting the method and starting busting pair login / password. The script is tuned for Kali linux 2.0, Kali linux 2016...

Logic Flaw Vulnerability in Large Practice Series Instructional Management System (CNVD-2021-21598)

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A logic flaw vulnerability exists in the Great Practice Series Teaching Management System, which can be exploited by attackers to obtain sensitive information...

Exploit for OS Command Injection in Systeminformation

CVE-2021-21315-systeminformation This is Proof of Concept for...

File Upload Vulnerability in the Cloud Platform of Teaching Video Application of Guangzhou Aoweiya Electronic Technology Co.

Teaching video application cloud platform is based on the background of the current educational video resources construction and user demand research, developed to adapt to the development of the times and meet the needs of the school, with the effectiveness, multi-functional, distinctive feature...

Logic flaw vulnerability in Kok Jin Practice Series teaching management system

Kok Jin Information Technology Limited is an educational software and information technology service provider. A logic flaw vulnerability exists in the Kok Jin Practice Series Teaching Management System, which can be exploited by attackers to obtain sensitive information...

DDoS attacks in Q4 2020

News overview Cybercriminals are constantly on the lookout for means and methods to make attacks more destructive. In Q4 2020, Citrix ADC application delivery controller devices became one such tool, when perpetrators abused their DTLS interface. The DTLS Datagram Transport Layer Security protoco...

ShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock

It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a family of security bugs in...

GitLab: Change project visibility to a restricted option

Summary When a GitLab administrator on gitlab.com or a private instance has restricted a project visibility option, the project visibility can still be changed to that option. This can be done using the API route. The same applies to groups. They can also be set to for example internal on the...

Exploit for CVE-2020-14644

It is an offensive tool for WebLogic. The repository contains a basic proof-of-concept PoC and exploit script for WebLogic, with the goal of creating a unified detection and exploitation tool. The script, named weblogicpoc.py, uses the T3 protocol to connect to a WebLogic server and exploit...