CVE-2017-12635

CVE-2017-12635 Case study and PoC of CVE-2017-12635 Apache CouchDB 1.7.0 / 2.x 2.1.1 - Remote Privilege Escalation Presentation CouchDB Apache CouchDB is a document-oriented NoSQL database, implemented in Erlang. CouchDB uses multiple formats and protocols to store, transfer, and process it's dat...

SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC Código para el blog de veracode Para demostrar la ejecución de código, 1. Construye el proyecto usando maven 2. Ejecuta python3 -m http.server 8080 para iniciar el servidor HTTP 3. Ejecuta exploit.java. Deberías observar una solicitud HTTP GET en el servidor 4. Para...

CVE-2022-39197-RCE

CVE-2022-39197-RCE First This project was modified from @its-arun project https://github.com/its-arun/CVE-2022-39197 When I tested the script, I found that the frida script could not query the data in the normal order. The method of modifying the frida script to modify the process name. Thanks to...

poc-cve-2024-0132

poc-cve-2024-0132 Entorno de reproducción: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Paso de reproducción: ejecutar la imagen del contenedor poc Objetivo: Acceder a archivos del host en el contenedor Llamar a las APIs del daemon de Docker a través del...

CVE-2025-6019-exploit

CVE-2025-6019：通过UDisks2文件系统调整大小的权限提升漏洞 漏洞详情 CVE ID ：CVE-2025-6019 影响 ：本地权限提升 LPE 受影响系统 ：存在漏洞udisks2版本的Linux系统 机制 ：文件系统调整大小期间的竞争条件允许访问位于全局可写临时目录中的SUID二进制文件 关键组件 ： udisks2服务（DBus接口） org.freedesktop.UDisks2.Filesystem.Resize方法 /tmp/blockdev下的临时挂载点 利用流程 1. 准备恶意文件系统镜像（攻击者） root@kitploit: dd...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

CVE-2019-19033

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authentication Bypass I. VULNERABILITY Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. II. CVE REFERENCE...

cve-2020-0796

CVE-2020-0796 LPE CVE-2020-0796 SMBGhost LPE Uso Instala Rust si lo necesitas https://www.rust-lang.org/learn/get-started Compila el código: cargo build --release Copia el .exe desde target/release/ al destino y ejecuta. Referencias...

nginx-ultimate-bad-bot-blocker

REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...

CVE-2021-41773_CVE-2021-42013_Exploits

Exploiting CVE-2021-41773 and CVE-2021-42013 Overview This repository focuses on exploiting two vulnerabilities in Apache HTTPD: CVE-2021-41773 and CVE-2021-42013. These CVEs represent path traversal vulnerabilities that can potentially lead to file mapping and remote code execution on Apache HTT...

CVE-2020-26217

Descripción XStream puede ser usado para Ejecución Remota de Código Influencia Xstream com.thoughtworks.xstream xstream 1.4.13 Cómo usar root@kitploit: 0 text/plain 0 -1 1 cmd/s...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

cuckooautoinstall

关于CuckooAutoinstall Cuckoo Sandbox 自动安装脚本 什么是Cuckoo Sandbox？ Cuckoo Sandbox 是一个恶意软件分析系统。 这意味着什么？ 这意味着你可以将任何可疑文件丢进去，然后获得一份报告，详细说明该文件在隔离环境中的行为。 我们最初在 Buguroo Offensive Security 创建这个脚本，目的是让痛苦的 Cuckoo 安装过程变得更快、更简单、更无痛。 支持的系统 本脚本大部分不依赖发行版（当然你必须在 GNU/Linux 上运行它），但在软件包安装方面，目前仅支持 Debian 衍生版。 另外，由于我们使用专有的...

apche_unomi_rce

CVE-2020-13942 Original blog post about the vulnerability: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ There are two RCE vectors: through MVEL injection and through OGNL injection. Both vectors target different code though the payloads look relativel...

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, even with images blocked. A small detail, but an annoying one if that was a precaution you were counting on. Elsewhere, a trusted software...

grafana-CVE-2018-15727

Grafana CVE-2018-15727 exploit Instalación root@kitploit: $ go get github.com/u238/grafana-CVE-2018-15727 Uso root@kitploit: $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: for Grafana...

Citrix-ADC-RCE-CVE-2020-8193

Citrix ADC RCE 0x01 CreateSession request root@kitploit: POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1 Host: 192.168.3.18:9080 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/76.0.3809.132...

CVE-2018-11776

CVE-2018-11776 概念验证（PoC）漏洞利用代码，以便我能快速评估有哪些可用的防护和修复方案。 最初由 Semmle 的 Man Yue Mo 发现：https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle 曾将 "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" 的 YouTube 视频上传过一阵子，但我觉得它已经下架了，或者至少不再链接到 Semmle：https://www.youtube.com/watch?v=5SDNX20SLJ0...

dp_crypto

dpcrypto Exploit de oráculo de cifrado basado en Base64 para CVE-2017-9248 Manejador de diálogo de Telerik UI for ASP.NET AJAX Publicado en exploit-db Actualización 2020 - Tenga en cuenta que la versión en exploit-db ahora está muy desactualizada en comparación con la última versión aquí en GitHu...