tf-log4j-aws-poc

自述文件 项目描述 本项目文件演示了使用 Terraform 基础设施即代码手段在 AWS 上对 log4j 漏洞（CVE-2021-44228）的概念验证。 此项目包含两个演示： 1. single-instance 包含一个易受攻击的服务器，您可以使用个人计算机对其进行利用，该服务器应受到 AWS WAF 保护。 2. double-instance 包含两个服务，易受攻击的服务器只能从反向代理服务器访问，反向代理应由 ModSecurity 保护。 结论： 第一个演示展示了使用 AWS WAF 的成功利用。第二个演示在启用 ModSecurity 时尝试失败。移除...

cve-2018-8120

cve-2018-8120 Ver detalles: http://bigric3.blogspot.com/2018/05/cve-2018-8120-analysis-and-exploit.html...

CVE-2022-38813

CVE-2022-38813 Veritical Privilege Escalation via user parameter in Blood Donor Management System Using Codeigniter v 1.0 Technical description: Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete t...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell A bash script demonstrating the manual exploitation of CVE-2016-10204 against a target endpoint, leading to upload of a php webshell. Currently, the webshell variable is set for a MySQL payload. This can be replaced with whatever backend you need to target. More information...

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

how-to-bypass-aslr-on-linux-x86_64

在 Linux x86-64 上绕过 64 位 ASLR 在这篇文章中，我将讨论 Samuel Groß 在他的 Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass 中描述的技术在 Linux x8664 上绕过 ASLR 的应用。 为了展示这一点，我将解决来自 Buckeye CTF 的一个 pwnable 挑战，即 guessgod。 我会尽量让内容对初学者友好，如果你觉得自己已经足够自信，或者只想直接看漏洞利用，可以随意跳过任何部分。 0. 引言...

Pentest-Command

项目背景 在渗透测试过程中我们会使用到各类的框架，例如:MSF、CS、Empire、Impacket等，本项目的主要目的是收录在后渗透测试阶段中常用到的命令 基础知识 Windows目录介绍 a、开机启动程序目录c C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup root@kitploit: b、开机自启动程序该特色常被用于进行权限维持c C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup c. System...

CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

CVE-2021-36396 Exploit Description This repository holds a Python-based exploit targeting CVE-2021-36393, a severe vulnerability found within Moodle's recent courses feature. The flaw resides in the 'sort' parameter, enabling SQL injection attacks that can lead to unauthorized database access...

jsubfinder

JSubFinder es una herramienta escrita en golang para buscar subdominios y secretos ocultos en páginas web y javascript en la URL dada. Desarrollada pensando en los cazadores de BugBounty, JSubFinder aprovecha el increíble rendimiento de Go, lo que le permite utilizar grandes conjuntos de datos y...

CVE-2023-50465

MonicaHQ XSS 利用 MonicaHQ XSS 创建一个账户 创建一个联系人 在文档中上传一个恶意的 SVG 文件 root@kitploit: alert"Monicahq XSS Poc"; 访问上传的文件...

CVE-2022-22963

CVE-2022-22963 Remote Code Execution exploiting CVE-2022-22963 attacking Spring Cloud service. Disclamier: This is for educational purposes only. The author is not responsible for the use of this program. Use under your own risk Usage root@kitploit: ./CVE-2022-22963 -h Usage: CVE-2022-22963 OPTIO...

CVE-2022-29359

学校社团申请系统 问题：未经验证的存储型跨站脚本攻击到HTML注入再到远程代码执行 作者：Zak Clifford 日期：2022年4月12日 厂商：https://www.sourcecodester.com/php/15266/school-club-application-system-phpoop-free-source-code.html 软件：https://www.sourcecodester.com/sites/default/files/download/oretnom23/scas0.zip 参考：https://github.com/ZSECURE...

SIPI

Simple IP Information Tools sIPI para Análisis de Datos de Reputación IP @st2labs Simple IP Information Tool @st2labs Autor : Julian J. Gonzalez Caracuel - Twitter: @rhodius | @seguriadxato2 | @st2labs Versión : 0.1 Resúmenes Esta herramienta está dirigida a equipos de respuesta a incidentes y a...

CVE-2025-2011

CVE-2025-2011 - Depicter Plugin SQL Injection Vulnerability CVE Reference: CVE-2025-2011 This repository contains a proof-of-concept environment for testing the SQL injection vulnerability in Depicter Slider & Popup Builder plugin versions 3.6.2. Prerequisites Docker Docker Compose Python 3.x...

mass_cve-2021-41773

masscve-2021-41773 批量 CVE-2021-41773 截图 用法！ python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool 注意！ 结果将自动保存到 vuln.txt 中 你可以在 https://github.com/justakazh/masscve-2021-41773/blob/4579bdbbda666b47b40116518d3fc5729574a2f8/cve-2021-41773.pyL49 添加公共目录 参考...

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

evilginx

Evilginx v.1.1.0 ESTA VERSIÓN ESTÁ OBSOLETA. ¡USE LA VERSIÓN MÁS RECIENTE! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx es un framework de ataque man-in-the-middle utilizado para suplantar credenciales y cookies de sesión de cualquier servicio web. Su núcleo se ejecuta en el servidor...

Hadoop-Yarn-ResourceManager-RCE

Vuln Impact There was an unauthorized access vulnerability in Hadoop yarn ResourceManager. This vulnerability existed in Hadoop yarn, the core component of Hadoop. Because Hadoop yarn opened the RPC service to the public by default, a remote attacker could take advantage of this unauthorized...

CVE-2023-6654

CVE-2023-6654 PHPEMS Cookie deserialization vulnerability. Exploiting this vulnerability allows modifying SQL statements through deserialization, and through SQL injection, changing the password or permissions of any existing user. The default administrator account is peadmin. Fofa fingerprint...

dns-rebinding-tool

Inspirado por @tavisio Este proyecto pretende ser un kit de herramientas integral para probar más a fondo los ataques de DNS rebinding y mi interpretación para entender este tipo de ataques. Consiste en un servidor web y un servidor DNS pseudo que solo responde a consultas de tipo A. El índice ra...