PasteJacker

PasteJacker Lo scopo principale dello strumento è automatizzare l'attacco PasteJacking/Clipboard poisoning/comunque lo si voglia chiamare raccogliendo tutti i trucchi conosciuti usati in questo attacco in un unico posto e in un unico lavoro automatizzato, poiché dopo aver cercato ho scoperto che...

CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 è un pratico script Python che fornisce un modo rapido ed efficace per sfruttare la vulnerabilità RCE di Microsoft RTF. Può generare un file RTF dannoso e consegnare il payload metasploit / meterpreter alla vittima senza alcuna configurazione...

CVE-2017-8759

Ferramenta de exploração CVE-2017-8759 A ferramenta de exploração CVE-2017-8759 é um prático script Python que oferece a testadores de penetração e pesquisadores de segurança uma maneira rápida e eficaz de testar a execução remota de código RCE no Microsoft .NET Framework. Ela pode gerar um arqui...

stackflow

stackflow Ferramenta universal de exploração de estouro de buffer baseado em pilha Usage root@kitploit: usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to...

CVE-2017-0199

漏洞利用工具包 CVE-2017-0199 - v2.0 漏洞利用工具包 CVE-2017-0199 - v2.0 是一个方便的 Python 脚本，提供快速有效的方法来利用 Microsoft RTF RCE。它可以生成恶意 RTF 文件，并将 metasploit / meterpreter 载荷传递给受害者，而无需任何复杂配置。 视频教程 https://youtu.be/42LjG7bAvpg 发布说明： 脚本引入了以下功能 root@kitploit: - 使用工具包生成恶意 RTF 文件 - 以微型 HTA + Web 服务器模式运行工具包进行利用 版本：Python 版本...

CVE-2017-0199

Toolkit di exploit CVE-2017-0199 - v4.0 Il toolkit di exploit CVE-2017-0199 - v4.0 è un pratico script Python che offre a pentester e ricercatori di sicurezza un modo rapido ed efficace per testare l'RCE di Microsoft Office. Può generare un file RTF/PPSX dannoso e consegnare alla vittima payload...

PhoneSploit-Pro

PhoneSploit Pro PhoneSploit con integrazione Metasploit. Uno strumento di hacking tutto-in-uno scritto in Python per sfruttare remotamente dispositivi Android utilizzando ADB Android Debug Bridge e Metasploit-Framework. Indice Panoramica Screenshot Funzionalità Requisiti Installazione delle...

Cooolis-ms

Cooolis-ms Wiki Spiegazioni Cooolis-ms è uno strumento di esecuzione del codice che include Metasploit Payload Loader, Cobalt Strike External C2 Loader e Reflective DLL injection. Il suo scopo è eludere, durante la scansione statica, alcuni codici che intendiamo eseguire e che contengono firme,...

CVE-2023-53959

FileZilla Client 3.63.1 is affected by a DLL hijacking flaw: an attacker can place a crafted TextShaping.dll in the application directory to achieve remote code execution when FileZilla is launched. The vulnerability stems from a missing/bad TextShaping.dll that can be replaced with a malicious p...

JetBrains TeamCity Unauthenticated Remote Code Execution

This module exploits an authentication bypass vulnerability in JetBrains TeamCity. An unauthenticated attacker can leverage this to access the REST API and create a new administrator access token. This token can be used to upload a plugin which contains a Metasploit payload, allowing the attacker...

Powershell Exec, Windows x64 Reverse Named Pipe (SMB) Stager

Execute an x64 payload from a command via PowerShell. Connect back to the attacker via a named pipe pivot Module Options msf use payload/cmd/windows/powershell/x64/meterpreter/reversenamedpipe msf payloadreversenamedpipe show actions ...actions... msf payloadreversenamedpipe set ACTION msf...

Powershell Exec, Windows Meterpreter Shell, Reverse TCP Inline x64

Execute an x64 payload from a command via PowerShell. Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. Module Options msf use payload/cmd/windows/powershell/x64/meterpreterreversetcp msf payloadmeterpreterreversetcp show actions ...actions... msf...

Powershell Exec, Windows x64 Command Shell, Windows x64 IPv6 Bind TCP Stager

Execute an x64 payload from a command via PowerShell. Spawn a piped command shell Windows x64 staged. Listen for an IPv6 connection Windows x64 Module Options msf use payload/cmd/windows/powershell/x64/shell/bindipv6tcp msf payloadbindipv6tcp show actions ...actions... msf payloadbindipv6tcp set...

Exploit for CVE-2017-8570

PoC exploit for CVE-2017-8570. The exploit toolkit, CVE-2017-8570, is a Python script designed to generate malicious PPSX files that can deliver payloads to users. It can be used in two scenarios: delivering local payloads or remote payloads. To deliver local payloads, the script generates a...

Exploit for CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy...

Microsoft RTF Remote Code Execution

''' Exploit toolkit CVE-2017-0199 - v2.0 https://github.com/bhdresh/CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payloa...

Exploit for CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-201...

Veil-Evasion RPC Command Injection Vulnerability

Veil Evasion is a payload that generates Metasploit an open source security vulnerability detection tool and bypasses common antivirus executables. A command injection vulnerability exists in Veil-Evasion RPC versions 2.5.2 through 2.24. An attacker could use this vulnerability to execute arbitra...

Acunetix OLE Automation Array Remote Code Execution Exploit

Acunetix versions 9.5 and below OLE automation array remote code execution exploit. !/usr/bin/python import BaseHTTPServer, sys, socket Acunetix OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 27 Mar 2015 Version...

Acunetix 9.5 - OLE Automation Array Remote Code Execution

!/usr/bin/python import BaseHTTPServer, sys, socket Acunetix OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 27 Mar 2015 Version: acunetix.exe Video: https://vid.me/SRCb class...