Optimum

Optimum Optimum – Hack The Box Writeup Overview In this machine, the objective is to gain initial access to a Windows host by exploiting a vulnerable web service and then escalate privileges to obtain the administrator flag. The attack path involved: Service enumeration Exploitation of Rejetto HT...

CVE-2021-22005

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

wordpress-CVE-2018-6389

wordpress-CVE-2018-6389 Metasploit module for WordPress DOS load-scripts.php CVE-2018-638...

pystinger

pystinger English | 简体中文 Pystinger implementa proxy SOCK4 y mapeo de puertos a través de webshell. Puede ser usado directamente por metasploit-framework, viper, cobalt strike para la conexión de sesiones. Pystinger está desarrollado en python, y actualmente soporta tres scripts de proxy: php, jsp...

sqlmap-nu11secur1ty

MSF Module Generator sqlmap-nu11secur1ty - Kali Linux Author: nu11secur1ty Description: Generate Metasploit auxiliary modules from Burp Suite requests and run sqlmap-nu11secur1ty automatically. Important: Only for lab/authorized testing. Overview This generator allows you to create a Metasploit...

CVE-2024-26169-Detail-1

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

stackflow

stackflow Universal stack-based buffer overfow exploitation tool Usage root@kitploit: usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to server before...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

bluekeep_metasploit_practice

bluekeepmetasploitpractice Exploiting bluekeep CVE-2019-0708 on windows 7 using metasplotable...

Bluekeep-Metasploit-Lab-Project

Exploiting BlueKeep CVE-2019-0708 on Windows 7 Objective Gain remote access to an unpatched Windows 7 system via the BlueKeep RDP vulnerability using Metasploit. Lab Setup Attacker: Kali Linux Target: Windows 7 Unpatched, RDP Enabled Network: NAT / Host-Only Tools Used Metasploit Framework Kali...

metasploit-bailiwicked_domain-fix

🚀 metasploit-bailiwickeddomain-fix Fix forundefined method each in Metasploit’s bailiwickeddomain.rb CVE-2008-1447 DNS cache poisoning module 🔎 Problem While testing CVE-2008-1447 using Metasploit, the original module crashed with: root@kitploit: undefined method each for an instance of IPAddr...

metasploit-framework

Metasploit Framework The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file. Latest Version Access the latest version of Metasploit from the Nightly Installers page. Documentation Comprehensive documentatio...

metasploit-framework

Metasploit Framework El Metasploit Framework es una herramienta de código abierto publicada bajo una licencia estilo BSD. Para obtener información detallada sobre la licencia, consulte el archivo COPYING. Última versión Acceda a la última versión de Metasploit desde la página Instaladores...

CVE-2023-28432-metasploit-scanner

CVE-2023-28432-metasploit-scanner MinIO Information Disclosure Vulnerability scanner by metasploit preparation POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2023-28432-metasploit-scanner cd CVE-2023-28432-metasploit-scanner mkdir -p /.msf4/modules/auxiliary/scanner/http cp...

Penetration-Testing-on-Metasploitable2

Internship Project 2 — Penetration Testing on Metasploitable2 Summary: This project demonstrates a complete penetration testing workflow: reconnaissance, enumeration, exploitation, post-exploitation validation, and mitigation recommendations. The target used is Metasploitable2 and the attack box ...

CVE-2020-7384

CVE-2020-7384 This is a small exploit in bash which I had made while solving one of the boxes from Hack The Box. The exploit is modified from the original exploit here: https://github.com/justinsteven/advisories/blob/master/2020metasploitmsfvenomapktemplatecmdi.md Usage dos2unix CVE-2020-7384.sh...

cve-2018-1335

Ankara Yildirim Beyazit University Computer Engineering Department CENG 325 - Principles of Information Security And Privacy CENG201 OOP Project Group Members @canumay @aslihann @ezgigucuyener @mburakdonmez References NVD - CVE-2018-1335 Exploit DB - Apache Tika-server 1.18 - Command Injection...

payday

Payday Generador de payloads que utiliza Metasploit y Veil. Toma la dirección IP como entrada y luego construye payloads automáticamente. Llama al framework Veil con la dirección IP proporcionada y crea binarios y handlers. Utiliza msfvenom para crear payloads y escribe archivos de handlers de...

payday

Payday Payload generator that uses Metasploit and Veil. Takes IP address input and then builds payloads automatically. Calls Veil framework with supplied IP address and creates binaries and handlers. Uses msfvenom to create payloads and writes resource handler files in the same way that Veil does...