jscythe

jscythe abuses the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code, even if their debugging capabilities are disabled. Tested and working against Visual Studio Code, Discord, any Node.js application and more! How 1. Locate t...

CVE-2024-47176-Scanner

CVE-2024-47176 扫描器 Evilsocket 针对 CVE-2024-47176 的 PoC，经过精简后改成了一个扫描器。我真的只是在 vim 中打开它，然后一直按住 d 键。 阅读他的研究：这里。这个脚本只是向 631 端口发送初始 UDP 数据包，并触发一个 HTTP 回调，表示目标主机存在漏洞。 用法： clone the repo git clone https://github.com/tonyarris/CVE-2024-47176-Scanner && cd CVE-2024-47176-Scanner/ set up a virtualenv python3...

Exploit for CVE-2024-47176

CVE-2024-47176 Scanner === Evilsocket's PoC for CVE-2024-47176,...

WordPress SendIt plugin <= 1.5.9 - Blind SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress SendIt plugin = 1.5.9 Blind SQL Injection Vulnerability Google Dork: inurl:wp-content/plugins/sendit/submit.php Date: 2011-08-25 Author: evilsocket evilsocket at gmail dot com Software Link: http://wordpress.org/extend/plugins/sendit/...

ChillyCMS Blind SQL Injection

No description provided by source. !/usr/bin/hybris Exploit Title: ChillyCMS Blind Sql Injection Date: 14-05-2010 Author: IHTeam Software Link: http://chillycms.bplaced.net/chillyCMS/core/show.site.php?id=9 Version: 1.1.2 Tested on: Win/Linux Example: simone@simons Advisories$ hybris chillycms.hy...

Joomla Simple File Lister 1.0 Directory Traversal

Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...

ChillyCMS Blind Sql Injection Vulnerability

Exploit for php platform in category web applications =========================================== ChillyCMS Blind Sql Injection Vulnerability =========================================== !/usr/bin/hybris Exploit Title: ChillyCMS Blind Sql Injection Author: IHTeam Software Link:...

Graugon Forum 1 - 'id' Command Injection / SQL Injection

!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...