CVE-2021-22204

ExifTool Remote Code Execution Vulnerability This is supposed to be an analysis of CVE-2021-22204, but it feels more like my scratchpad filled with messy notes. It might seem rambling for a vulnerability analysis, but I learned a lot from it. To be honest, I have never used this tool and had almo...

Elastix-2.2.0-CVE-2012-4869

Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...

viper

Viper Frank4DD, @ 2000年5月 Viper 是一款针对使用 crypt 加密的密码进行暴力破解的 UNIX 风格密码破解工具。它源自 Hale 的 viper 1.4 Perl 程序。虽然市面上还有其他更强大的破解程序，但此工具主要用于研究密码安全性，同时硬件速度正急剧提升。如果我没记错，我记得在 PDP-11 上生成密码需要 30 秒。而现在，我们可以在单个系统的单个 CPU 核心上每秒执行超过 230,000 次生成，速度提升了数百万倍。不过，在全密钥空间中破解 8 字符密码仍需一些时间，详见 keyspace.txt。 最初，ufc-crypt 实现似乎是当时最...

psad

psad - Detección de intrusiones con registros de iptables Introducción El detector de ataques de escaneo de puertos psad es un demonio ligero del sistema escrito en Perl, diseñado para trabajar con el código de cortafuegos Linux iptables/ip6tables/firewalld para detectar tráfico sospechoso como...

citrix-logchecker

citrix-logchecker Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation Written by Otmar Lendl. Usage: root@kitploit: ./citrix-anomaly.pl -d -v -h -p file -a X logfiles This script parse citrix netscale syslog files and looks for session reconnects that might be the result ...

Webmin-CVE-2022-0824-Enhanced-Exploit

Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Webmin CVE-2022-0824 Enhanced Exploit Tool - Supports dual modes: command execution and reverse shell !IMPORTANT An enhanced exploit tool targeting Webmin CVE-2022-0824, supporting both direct command execution and reverse shell modes. 🚀 Features ✅...

CVE-2019-15107

CVE-2019-15107 CVE-2019-15107 test program This remote command execution vulnerability in webmin, roughly caused by perl's qx/…/ leading to command execution, requires certain special conditions. During reproduction, I casually wrote a graphical exploit program. It is worth noting that the user...

filebuster

Filebuster Un fuzzer web extremadamente rápido y flexible ¿Qué es? Filebuster es un script de fuzzing HTTP / descubrimiento de contenido con muchas características, diseñado para ser fácil de usar y rápido. Utiliza una de las clases HTTP más rápidas del mundo de PERL - Furl::HTTP. Además, el...

perl_spreadsheet_excel_rce_poc

ParseExcel security vulnerabilitiy TL;DR: RCE from logic in parsing format strings. Short explanation on the exploit Root cause of the exploitation comes from calling eval to an unvalidated user input in Utility.pm...

CVE-2019-15107

CVE-2019-15107 POC for CVE 2019-15107 Use for educational purpose only. To use, opena listener on your machine nc -lnvp Modify the perl command to match your ip and port. Launch the script, a reverse shell will open on your listener. The python script will timeout, this is expected...

citrix_dir_traversal_rce

citrixdirtraversalrce A directory traversal was discovered in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. When the NSPPE receives a request for GET /vpn/index.html, it is supposed to send this request to Apache, which processes it...

Mailcow-CVE-2022-31138

Mailcow CVE-2022-31138 RCE and Domain Admin privilege escalation for Mailcow. POC for CVE-2022-31245 can be modified to work with this vulnerability. Reported and fixed: 2022-06 Code Injection, RCE Type: Code Injection CWE-94, RCE, Domain Takeover Affected versions: least 2019 - 2022-06a A flaw...

perl-DBI security update

An update is available for perl-DBI. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DBI is a database access Application Programming Interface API for the Perl...

RLSA-2026:66179 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: Incomplete fix for...

ROOT-OS-ALPINE-322-CVE-2026-13221 CVE-2026-13221 in perl - Patched by Root

Root has patched CVE-2026-13221 in the perl package for Root:Alpine:3.22. Multiple fixed versions available...

msfrpc

NOTE: This tool is no longer under active maintenance. ===================== Metasploit MSGRPC Modules Ryan Linn [email protected] http://www.trustwave.com Modules for communicating with Metasploit MSGRPC Introduction This repository contains two modules for communicating with Metasploit's...

vbscan

OWASP VBScan OWASP VBScan short for VBulletin Vulnerability Scanner is an opensource project in perl programming language to detect VBulletin CMS vulnerabilities and analysis them . Why OWASP VBScan ? If you want to do a penetration test on a vBulletin Forum, OWASP VBScan is Your best shot ever!...

OPENSUSE-SU-2026:11754-1 perl-DBI-1.653.0-1.1 on GA media

These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed...

RockyLinux 9 : perl-DBI (RLSA-2026:66179)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66179 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the preceding...

SMBCompScan

SMBCompScan Scanner script to identify hosts vulnerable to CVE-2020-0796 Advisory Disclaimer This script can help to identify machines with the SMBv3 vulnerablity by checking for enabled compression. Still, it might return "vulnerable" for machines which have KB4551762 installed. Requirements Per...