CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules Two similar modules that take advantage of CVE-2016-5639 to dump hashes and retrieve files through path traversal. I made these modules separate because I wanted experience writing something that could "dump" hashes,...

CVE-2020-1938-MSF-MODULE

CVE-2020-1938-MSF-MODULE Modified version of auxiliary/admin/http/tomcatghostcat, Read any file Overwrite the file/metasploit-framework/modules/auxiliary/admin/http/tomcatghostcat.rb and restart msfconsole to execute reloadall. Then you can use the module...

CVE-2015-2900-Exploit

CVE-2015-2898-2901, CVE-2015-6006 POC Exploit & Metasploit module This is a proof of concept exploit for version 2.22.20142.166 and prior of the MEDCIN Engine medcinserv.exe or medcinservv22.exe. More details about the vulnerabilities can be found at:...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

CVE-2018-4878

Metasploit module for CVE-2018-4878 The SWF file is based on the PoC by Michael Gorelik. Copy CVE-2018-4878.swf to data/exploits...

cve-2017-7269

fixed msf module for cve-2017-7269 fix not work when length of physical path not equal to 19,or has a host binding. add options: PhysicalPathLength,HttpHost for test: host phyiscal path: c:\inetpub\ , length=11 msf use exploit/windows/iis/cve-2017-7269 msf exploitcve-2017-7269 show options Module...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule THIS IS NOT AN ORIGINAL EXPLOIT. THIS IS AN AUDITED VERSION FOR A THM BOX Below are the links for the original, tryhackme box and my writeup for the box:...

cookie_crimes

Extracción de cookies de Chrome sin ser root Esto imprimirá las cookies de Chrome de un usuario. No necesitas su contraseña ni ser root para usarlo. genial genial genial genial genial. Si no eres del tipo de persona que regularmente obtiene la capacidad de ejecutar código en las computadoras de...

pipe_finder

Pipe Finder 1.0 Script automatizado para buscar en el protocolo SMB nombres de pipe disponibles Capturas de pantalla Requisitos metasploit-framework wget locate módulo pipeauditv2.rb https://github.com/peterpt/pipeauditorfb - Se instalará en la primera ejecución Requisitos de instalación apt-get...

cve-2025-24054

CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...

ms08-067

📖 Overview This repository contains a Metasploit module implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Kali Linux Metasploit Framework...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

CVE-2019-15107

CVE-2019-15107 Python implementation of CVE-2019-15107 Webmin 1.890-1.920 Backdoor RCE exploit Based on the Metasploit module for the same exploit EDB ID: 47230 Exploit is mostly automatic. See ./CVE-2019-15107.py --help for full range of switches Warning: The code in this repository may be used...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...

CVE-2014-6271-IPFire

CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire =2.15 ShellShock RCE Based on the Metasploit module for the same exploit EDB ID: 34839 Exploit is automatic. See ./CVE-2014-6271.py --help for a full range of switches Warning: The code in this repository may be used for academic/ethic...

ALLMediaServer-1.6-Buffer-Overflow

CVE-2022-28381 ALLMediaServer 1.6 Remote - Buffer Overflow SEH ALLMediaServer-1.6-Buffer-OverflowMetasploit Proof and Exploit References https://nvd.nist.gov/vuln/detail/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381...

awind-research

Awind Research This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers. The repository is split into these subsections: hardware - hardware hacking stuff, mostly for MMC dumpin...

msf-cve-2024-46987

MSF-CVE-2024-46987 Metasploit module to exploit CVE-2024-46987 - an authenticated path traversal vulnerability in Camaleon CMS versions = 2.8.0 and 2.9.0 Based on this POC by Goultarde...

WinBypass

Windows UAC Bypass | Privilege Escalation Slui File Handler Hijack LPE - Windows 8-10 SluiHijackBypass.ps1 UAC Bypass via FodHelper - Windows 10 FodhelperBypass.ps1 UAC Bypass via Event Viewer - Windows 7 EventVwrBypass.ps1 Metasploit-Framework Module bypassuacsluihijack.rb copy...