mitm

mitm A simple yet effective python3 script to perform DNS spoofing via ARP poisoning Installation root@kitploit: adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py Demo Outcome...

SSH-User-Enum-Python3-CVE-2018-15473

SSH-User-Enum-Python3-CVE-2018-15473 SSH User Enumerator in Python3, CVE-2018-15473, I've updated the code of this exploit https://www.exploit-db.com/exploits/45939 to work with python3 instead of python2, and I'm trying to implement functionalities to enumerate more users instead of only one...

dirtycups

dirtycups.py Dirty CUPS is a free Linux/Unix CVE scanner Python3 script to validate if a target is vulnerable to CVE-2024-47176. This is a socket only CUPS scanner based off of MalwareTech's cupsscanner.py: https://github.com/MalwareTech/CVE-2024-47176-Scanner/blob/master/cupsscanner.py Original...

Exploit for CVE-2023-38646

CVE-2023-38646 - Metabase RCE Metabase open source before 0.46...

Uvdesk v1.1.3 - File Upload Remote Code Execution (Authenticated) Exploit

Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python3 CVE-2023-39147....

Exploit for SQL Injection in Cisco Smart_Software_Manager_On-Prem

CVE-2023-20110 PoC script for CVE-2023-20110 -...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Ibexa Ezplatform-Graphql

CVE-2022-41876 - eZ Platform user information disclosure A vu...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947-ex...

Exploit for SQL Injection in Woocommerce

CVE-2021-32790 This is a Proof of Concept for the WooCommerce...

NTLMRawUnHide - A Python3 Script Designed To Parse Network Packet Capture Files And Extract NTLMv2 Hashes In A Crackable Format

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The tool was developed to extract NTLMv2 hashes from files generated by native Windows binaries like NETSH.EXE and PKTMON.EXE without conversion. The following bina...

Mersive Solstice 2.8.0 Remote Code Execution

Exploit Title: Mersive Solstice 2.8.0 - Remote Code Execution Google Dork: N/A Date: 2016-12-23 Exploit Author: Alexandre Teyar Vendor Homepage: https://www2.mersive.com/ Firmware Link: http://www.mersive.com/Support/Releases/SolsticeServer/SGE/Android/2.8.0/Solstice.apk Versions: 2.8.0 Tested On...

Cisco node-jos < 0.11.0 - Re-sign Tokens

!/usr/bin/env python3 import base64 from urllib.parse import quoteplus import rsa import sys zi0Black ''' EDB Note: This has been updated https://github.com/offensive-security/exploitdb/pull/139 POC of CVE-2018-0114 Cisco node-jose = 8 return b::-1 def generateheaderpayloadpayload,pubkey: create...

Exploit for Code Injection in Samba

SambaHunter It is a simple script to exploit RCE for Samba CV...

WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload

Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link:...