Exploit-Development

Developed Exploits This repository will contain any exploit or proof of concept code I release publicly. In addition to this, I will include Metasploit Modules, and ported exploits. Metasploit Modules This directory will contain all Metasploit modules I've developed. Note that code within this...

CVE-2024-38472

Crear un módulo de Metasploit para ejecución remota de código RCE aprovechando la vulnerabilidad SSRF CVE-2024-38472 en Apache HTTP Server en Windows es un desafío porque SSRF en sí mismo no resulta directamente en RCE. Sin embargo, SSRF puede ser a menudo un paso hacia lograr RCE, especialmente ...

autoblue

AUTOBLUE: Herramienta Automatizada de Explotación EternalBlue AUTOBLUE es una herramienta de automatización diseñada para explotar la vulnerabilidad EternalBlue CVE-2017-0144 en máquinas Windows. La herramienta integra el poder de Nmap para el escaneo de vulnerabilidades y msfconsole de Metasploi...

cve-2015-1592

These files were discussed in my Houston Perl Mongers talk about "Weaponizing Perl Serialization Flaws With MetaSploit". The video of the talk that explains these files is available here: https://youtu.be/Gzx6KlqiIZE The storable-.pl files are used to generate the 'config' parameter values used i...

cve-2017-7269

fixed msf module for cve-2017-7269 fix not work when length of physical path not equal to 19,or has a host binding. add options: PhysicalPathLength,HttpHost for test: host phyiscal path: c:\inetpub\ , length=11 root@kitploit: msf use exploit/windows/iis/cve-2017-7269 msf exploitcve-2017-7269 show...

CVE-2017-11882-metasploit

CVE-2017-11882-metasploit Este es un módulo de Metasploit que explota CVE-2017-11882 utilizando el POC a continuación: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Instalación 1. Copia el archivo cve201711882.rb a...

mjet

mjet Mogwai Security Java Management Extensions JMX Exploitation Toolkit mjet is a tool that can be used to protect insecure configured JMX services. It is based on the blog post "Exploiting JMX-RMI" from Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi" and can be used to...

msf-auxiliarys

msf-auxiliarys metasploit auxiliary post-modules の私のコレクション 説明 root@kitploit: この作業ディレクトリには、私が作成したさまざまな metasploit auxiliary モジュールが含まれており、 post-exploitation の一般的なタスクを支援します。 ダウンロード/インストール 1º - github からモジュールをダウンロード 2º - モジュールを編集して説明を確認する 3º - モジュールを metasploit データベースに移植する 4º - metasploit...

CVE-2017-0199-v5.0

Exploit toolkit CVE-2017-0199 - v5.0 Exploit toolkit CVE-2017-0199 - v5.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit

CVE-2017-9805StrutsFuzzNSploit Python3で書いた、ただの酷いスクリプトです。ファジングし、望むならMetasploit経由でエクスプロイトします：CTFなど向けのCVE-2017-9805 RCE。かっこいい連中からパクったthugcrowd DWTFYW Public Licenseに従います =...

CVE-Lib

CVE-Lib — CVE + PoC Library 2026 Local, offline-searchable...

Cybersecurity-Home-Lab-Project-Documentation

Cybersecurity Home Lab — Project Documentation Author: Ga...

enterprise-network-pentest-project

Enterprise Network Penetration Testing Lab A self-built, isol...

Metasploit Wrap Up: This One Goes to Sixteen!

This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the...

CVE-2015-10144

creationtimestamp| type| source ---|---|--- 2026-09-08 06:50:22+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wpresponsivethumbnailsliderupload.rb...

PhoneSploit-Pro v2.3

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

smb-ms17-010-pentest-report

SMB MS17-010 EternalBlue Penetration Test Report A lab-base...

Window-7-Vulnerability-and-Exploitation.

Windows 7 Vulnerability Assessment & Exploitation Lab 🎯 Ob...

CVE-2026-16895

A logic vulnerability fail-open condition has been identified within the Metasploit Framework's JSON-RPC web service interface. When an exception occurs during the database health check db.check and the environment variable MSFWSJSONRPCAPITOKEN is not explicitly set, the application resets the...

CVE-2026-16895

CVE-2026-16895 is a fail-open logic vulnerability in the Metasploit Framework 's JSON-RPC web service interface. When an exception occurs during the database health check (db.check) and the environment variable MSF_WS_JSON_RPC_API_TOKEN is not explicitly set, the internal flag msf.auth_initialize...