2429342 matches found
CVE-2023-49471
CVE-2023-49471 Vulnerability Type Blind SSRF Affected Product and Version Bar assistant / -----------------------------8290129562507108753887567115 Content-Disposition: form-data; name="images0copyright" ------------------------...
Daily-dose-of-malware
Daily dose of malware DDOM or Daily Dose of Malware allows you to gather malware and c&c from open source intelligence. It can display info, export results to text file or download malicious software. I want to make it as fresh as possible, that's why all malwares are dated on few days back. Cymo...
CVE-2020-7699_reproduce
CVE-2020-7699 Reproduction Reproduction for Node.js RCE vulnerabilityCVE-2020-7699, my lab work Setup Node.js edition: v14.16.1, please make sure that the edition of Node.js is 14Other edition will propably work, I didn't test Python edition：3.9.5, Python is only used to send HTTP attack request,...
nimbostratus
Nimbostratus Tools for fingerprinting and exploiting Amazon cloud infrastructures. These tools are a PoC which I developed for my "Pivoting in Amazon clouds" talk, developed using the great boto library for accessing Amazon's API. For more information visit the project page Feel free to report...
dsa
A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...
CVE-2025-52688
CVE-2025-52688 Affected Products Alcatel AP13161 - Enterprise WIFI access point Summary There are 2 main vulnerabilities being addressed here: Lack of input sanization on multiple JSON web parameters that allows malicious characters such as ; to be injected to caused a command injection attack La...
Pyramid
Pyramid ¿Qué es? Pyramid está compuesto por: 1. un servidor HTTP/S en Python que puede entregar archivos cifrados chacha, xor 2. módulos de Python que pueden cargar dependencias en memoria de herramientas ofensivas como Bloodhound-py, secretsdump, LaZagne, Pythonnet, DonPAPI, pythonmemorymodule,...
Weblogic
weblogic CVE-2019-2725 CVE-2019-2729 POC Ejecutar comando y mostrar salida uso: objetivo único python3 weblogicgetwebshell.py http://url objetivo por lotes, colocar las URL del lote en urllist.txt python3 weblogicgetwebshell.py all...
CVE-2021-29447-POC
CVE-2021-29447-POC Acerca de Este script automatiza los pasos necesarios para explotar CVE-2021-29447 en la funcionalidad de carga de medios de Wordpress y usarlo para extraer archivos a través de un XXE. Uso root@kitploit: ./generatepayloads.py --help usage: generatepayloads.py -h --local-ip...
sift
Sift Secrets Credential and sensitive-data exposure triage for file shares. When an open share turns up, the question is never "does this repo have a leaked key". It is "what just got exposed, and what do I have to roll before close of business." sift is built for that question: high recall, a fa...
CVE-2021-3129
CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Modified from @crisprss's https://github.com/crisprss/LaravelCVE-2021-3129EXP , added more available gadgets for traversal Use： root@kitploit: python3 exp.py http://127.0.0.1:8888 Preview： root@kitploit:...
Exploit-CVE-2024-31777
CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestricted File Upload PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-31777, a security vulnerability discovered in GUnet OpenEclass E-learning platform with a CVSS of 9.8 which affects the endpoint of...
cve-2020-0618
CVE-2020-0618 Honeypot Detects and logs attempts to exploit CVE-020-0618 SQL Reporting Services RCE Serves content and headers like SSRS would, in order to increase chance of indexing on search engines e.g. google, shodan etc. Based on the great work of MDSec and x1sec Installation Get the code...
vaas-cve-2014-6271
Vulnerabilidad como Servicio - CVE 2014-6271 Un sistema Debian Buster Linux con una versión vulnerable de bash y una aplicación web para mostrar CVS-2014-6271, también conocido como Shellshock. Resumen Este contenedor Docker está basado en Debian Buster y ha sido modificado para usar una versión...
web-traffic-generator
web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...
evillimiter-windows
Evil Limiter para Windows Una herramienta para limitar el ancho de banda subida/bajada de los dispositivos conectados a tu red sin acceso físico o administrativo. evillimiter emplea ARP spoofing y traffic shaping para limitar el ancho de banda de los hosts en la red. Esto se explica en detalle a...
extended-xss-search
Buscador y Finder de XSS Extendido Esta es la versión extendida basada en la idea inicial ya publicada como "xssfinder". Esta versión privada permite a un atacante realizar no solo solicitudes GET sino también POST. Además, es posible proxy cada solicitud a través de Burp u otro túnel. Primeros...
CVE-2024-7954
CVE-2024-7954 This exploit will attempt to execute system commands on SPIP targets CVE-2024-7954. Overview This is a bulk scanning and exploitation tool for CVE-2024-7954: SPIP 4.2.8 allows unauthenticated attackers to launch RCE on SPIP targets. This tool is based on this Security Research. How ...