linux-soft-exploit-suggester

linux-soft-exploit-suggester 用于查找系统上所有易受攻击软件的漏洞利用脚本，专注于软件包而不仅仅是内核漏洞。 它使用 exploit database 来评估软件包的安全性，并搜索漏洞利用以帮助进行权限提升。 用法 下载 root@kitploit: wget https://raw.githubusercontent.com/belane/linux-soft-exploit-suggester/master/linux-soft-exploit-suggester.py 基本用法。下载漏洞数据库，生成软件包列表并搜索漏洞利用。 root@kitploit:...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

Exploits + Shellcode + GHDB

Repositorio Git de Exploit Database Este es un repositorio oficial de The Exploit Database, un proyecto patrocinado por Offensive Security. Nuestros repositorios son: Exploits y Shellcodes: gitlab.com/exploit-database/exploitdb Exploits binarios: gitlab.com/exploit-database/exploitdb-bin-sploits...

Binary Exploits

Exploits binarios de Exploit Database Los exploits binarios se encuentran en el directorio /bin-sploits/. Este es un repositorio oficial de The Exploit Database, un proyecto patrocinado por Offensive Security. Nuestros repositorios son: Exploits y Shellcodes:...

docker-hacklab

Docker Hacklab 我的个人黑客实验室，创建你自己的。 法文文章：https://blog.ston3o.me/creer-hacklab-virtuel-docker/ 快速开始 root@kitploit: $ docker run --name hacklab --net=host --privileged -it ston3o/docker-hacklab zsh | || | /\ / | |/ / | /\ | | |/ \ | ' /dev/null 2&1; docker start hacklab /dev/null; docker exec -it -e...

Findsploit

Findsploit por @xer0dayz https://sn1persecurity.com ACERCA DE Finsploit es un sencillo script bash para buscar rápida y fácilmente bases de datos de exploits tanto locales como en línea. Este repositorio también incluye "copysploit" para copiar cualquier exploit de exploit-db al directorio actual...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2...

ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure

ADB formerly Pirelli Broadband Solutions P.DGA4001N router with firmware PDGTEFSP4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service device restart as demonstrated by a direct request to 1...

Joomla! Component WMI 1.5.0 - Local File Inclusion

A directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface aka WMI or comwmi component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1607 info: name: Joomla!...

Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion

Joomla! Omilen Photo Gallery comomphotogallery component Beta 0.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter to index.php. id: CVE-2009-4202 info: name: Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion...

SquirrelMail Address Add 1.4.2 - Cross-Site Scripting

SquirrelMail Address Add 1.4.2 plugin contains a cross-site scripting vulnerability. It fails to properly sanitize user-supplied input, thus allowing an attacker to execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to...

AeroCMS 0.1.1 - SQL Injection

AeroCMS 0.1.1 contains a SQL injection caused by unsanitized author parameter, letting attackers execute arbitrary SQL commands, exploit requires crafted author input. id: CVE-2022-38812 info: name: AeroCMS 0.1.1 - SQL Injection author: shivampand3y severity: medium description: | AeroCMS 0.1.1...

WatchGuard Fireware AD Helper Component - Credentials Disclosure

WatchGuard Fireware Threat Detection and Response TDR service contains a credential-disclosure vulnerability in the AD Helper component that allows unauthenticated attackers to gain Active Directory credentials for a Windows domain in plaintext. id: CVE-2020-10532 info: name: WatchGuard Fireware ...

cve-exploit

CVE-EXPLOIT 请仅用于合法目的 使用本软件。 我对您的行为不承担任何责任。 使用 Python 3.11.2 由 Edu0x01 制作 描述 cve-exploit 是一个用于查找 CVE 和漏洞利用集的中心。它基于官方 NIST、ExploitDB 和 Github 数据库。该工具可以快速便捷地搜索 CVE 及其关联的漏洞利用，能够检测漏洞利用的编译选项，还可用于列出最新的高危漏洞。 安装 通过 PIP 安装： root@kitploit: apt-get install python3 python3-pip python3-dev git libssl-dev...

CVE-2019-3396_Confluence

CVE-2019-3396Confluence Toda la documentación está en archivo de script. Este exploit también es parte de la base de datos de exploits Exploit Database mantenida por Offensive Security. Capturas de pantalla...

Windows-RCE-exploits

My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...

exploitdb

新仓库位于此处：https://gitlab.com/exploit-database/exploitdb...

Vulnerability-and-Exploit-Analysis

🛡️ Vulnerability and Exploit Analysis Ethical Hacking labor...

The Vulners team has released an updated version Getsploit

The Vulners team has released an updated version ofGetsploit. The utility allows you to search for public exploits in the Vulners.com database. It supports both an online mode search queries are executed on the Vulners server and a fully offline mode exploit data from Vulners is downloaded to a...