8945 matches found
podman: Arbitrary file write when importing OCI archive
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...
BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion
The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File Inclusion vulnerability via TimThumb. id: CVE-2015-9415 info: name: BJ Lazy Load Timthumb = 0.7.5 - Remote File Inclusion author: s4e-io severity: high description: | The BJ Lazy Load plugin v0.7.5 for WordPress has a Remote File...
mariadb-13-rce-lab
MariaDB 13.0.1-rc RCE Lab Remote code execution on the unmodified, stock MariaDB 13.0.1-rc Docker image as uid 999 mysql. Two exploit variants: Variant| File| Requirements| Notes ---|---|---|--- Pure SQL recommended| exploitpuresql.py| a low-priv MariaDB account + TCP| no host access, no docker, ...
catnip
Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...
spd_flasher
CVE-2022-38694 Exploit Endurecido — Autoflasher USB Host RP2350 README en chino Tutorial Tutorial de ingeniería inversa de la cadena de arranque de UNISOC UDX710 y de arranque endurecido con RP2350 Explotando la vulnerabilidad CVE-2022-38694 del BootROM de Unisoc mediante un Raspberry Pi RP2350...
linkedin-extension-fingerprinting
Huella digital de extensiones de Chrome de LinkedIn LinkedIn sondea silenciosamente 2,953 extensiones de Chrome en cada carga de página. Antecedentes Este repositorio documenta cada extensión que LinkedIn verifica y proporciona herramientas para identificarlas. Datos La lista completa de...
HAProxy-Keepalived-Sec-HighLoads
HAProxy and Keepalived LoadBalancer+Cluster+Sec+HighLoads Installation and Configuration HAProxy is an open-source software that provides a proxy server service for TCP and HTTP based applications with high availability load balancing. Keepalived is an open-source software capable of providing IP...
cracklord
Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...
cracklord
Cracklord http://jmmcatee.github.io/cracklord/ ¿Qué Es? CrackLord es un sistema diseñado para proporcionar un sistema escalable, conectable y distribuido tanto para el descifrado de contraseñas como para cualquier otro trabajo que necesite muchos recursos informáticos. Dicho de otra manera,...
LHF
Codacy Badge Esto solo ha sido probado en la distribución más nueva de Kali Linux LHF: Low Hanging Fruit una herramienta de reconocimiento para pruebas de penetración Para instalar dependencias: ./Install.sh Para iniciar: ./LHF.py root@kitploit: + Checking permissions - Rockyou wordlist is missin...
multitor
multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...
multitor
multitor Crea múltiples instancias de TOR con balanceo de carga. Descripción • Introducción • Cómo usar • Parámetros • Requisitos • Docker • Otros • Licencia • Wiki Descripción Proporciona un único endpoint para los clientes. Soporta el protocolo HAProxy , socks y servidores http-proxy : polipo ,...
HotLoad-Driver
Hot Load Your Driver Using C++ this project was Bsides Augusta for the RAT talk. Slides can be seen bellow and are extremely helpful for understanding the execution flow. These two methods have separate projects. Demo / Slides:...
CVE-2018-3639-specter-v4-
CVE-2018-3639-specter-v4 spectre v4 : Speculative Store Bypass CVE-2018-3639 proof of concept for Linux build: gcc spectre-v4.cpp -o spectre run: ./spectre result: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low than threshold:1...
CVE-2023-22884-Airflow-SQLi
Apache Airflow SQL injection PoC CVE-2023-22884 PoC for CVE-2023-22884 is an Apache Airflow RCE vulnerability affecting versions prior to 2.4.0. The official report description says: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software...
Mysql-Readfile
Introduction This project mainly uses load data local infile to obtain any files of the attacker's host Windows platform, and the files to be visited can be listed in file.txt This will be very meaningful when we can control the connection configuration of Mysql in some cases. Project usage Step...
CVE-2019-6446
CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...
wordpress-cve-2018-6389
WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service = 4.9.4 Date: 05/02/2018 Software Link: WordPress Version: = 4.9.4 Tested on: KaLi Linux 2018.1 CVE: CVE-2018-6389 Discovered by: Barak Tawily Exploit by: Javier Olmedo HOW TO USE? Clone this repository root@kitploit: g...
postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...