webdav_exploit

webdavexploit An exploit for Microsoft IIS 6.0 CVE-2017-7269 based on https://github.com/edwardz246003/IISexploit but works remotely usage root@kitploit: python exploit.py -d http://www.eliuha.com/eliuha...

CVE-2017-7269

CVE 2017.7269 PoC Index CVE 2017.7269 PoC Index Authors Abstract What is Microsoft IIS? What is Microsft Windows server? What is WebDAV? Description Usage: References & Discoverers Authors NoexDevPen - Beacons Profile mag4no10 - Beacons Profile Abstract What is Microsoft IIS? Internet Information...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 & Still Giving... Latest presentation: Beyond Microsoft IIS Short File Name Disclosure Latest blog post: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/ I recommended everyone to try @bitquark'...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 一个用于为 CVE-2000-0649 创建 PoC 的小工具。 用法 此脚本用于验证服务器是否存在 CVE-2000-0649 漏洞。请注意尝试 HTTP、HTTPS 以及不同的路径。根据我的经验，信息泄露大多发生在通过 HTTP 连接并使用默认路径 '/' 或 '/images' 时。 你需要提供主机/IP 地址和端口。默认情况下路径设置为 '/'。你也可以选择性地指定以 '/' 开头的路径。 root@kitploit: $ python3 cve-2000-0649.py -host hostname -port port -path path...

CVE-2017-0055-PoC

CVE-2017-0055 PoC 微软 IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ 跨站脚本 Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 基础评分：6.1 严重级别：中 利用： http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

cve-2017-7269-tool

cve-2017-7269 webshell 和 shellcode 工具 构建 root@kitploit: csc cve-2017-7269.cs 用法 root@kitploit: CVE-2017-7269 参数 请求头： -h 设置 If 请求头的主机 -p 设置 If 请求头的端口 -s 设置 If 请求头的协议 scheme -l 物理路径长度 WebShell： -w 上传 webshell 到服务器 -wp webshell 保存路径 ShellCode： -c 执行 shellcode 其他： -t 仅测试漏洞。 -e 获取 shell 或测试后退出进程 -k...

EUVD-2019-9923

Malware in sbrugna...

EUVD-1999-1525

Malware in sbrugna...

EUVD-2017-0422

Malware in sbrugna...

EUVD-2006-1398

Malware in sbrugna...

EUVD-2007-1275

Malware in sbrugna...

EUVD-2005-0872

Malware in sbrugna...

EUVD-2006-5842

Malware in sbrugna...

EUVD-2006-6561

Malware in sbrugna...

EUVD-2019-1676

Malware in sbrugna...

PT-2025-38499

CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...

Trimble Cityworks 15.x < 15.8.9 / 23.x < 23.10 Deserialization RCE

The version of Trimble Cityworks installed on the remote host is 15.x prior to 15.8.9, or 23.x prior to 23.10. It is, therefore, affected by a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet...

CVE-2020-0645

A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'...

CVE-2019-1365

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...