mitm

mitm A simple yet effective python3 script to perform DNS spoofing via ARP poisoning Installation root@kitploit: adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py Demo Outcome...

dirtycups

dirtycups.py Dirty CUPS 是一款免费的 Linux/Unix CVE 扫描器（Python3 脚本），用于验证目标是否存在 CVE-2024-47176 漏洞。这是一款基于 MalwareTech 的 cupsscanner.py 的纯套接字 CUPS 扫描器：https://github.com/MalwareTech/CVE-2024-47176-Scanner/blob/master/cupsscanner.py 原始脚本 jimi2x 功能 创建本地套接字监听器用于回调 触发来自目标的响应 等待传入连接 快速安装说明： root@kitploit:...

SSH-User-Enum-Python3-CVE-2018-15473

SSH-User-Enum-Python3-CVE-2018-15473 SSH用户枚举工具，Python3实现，CVE-2018-15473，我已将此漏洞利用代码（https://www.exploit-db.com/exploits/45939）更新为使用Python3而非Python2，并正在尝试实现枚举多个用户而非仅单个用户的功能。 OpenSSH 7.7 - 用户枚举脚本（Python3） sshuserenum3.py 运行良好，使用方法： root@kitploit: python3 sshuserenum3.py 10.10.10.84 -p 22 root IP =...

Exploit for CVE-2023-38646

CVE-2023-38646 - Metabase RCE Metabase open source before 0.46...

Uvdesk v1.1.3 - File Upload Remote Code Execution (Authenticated) Exploit

Exploit Title: Uvdesk v1.1.3 - File Upload Remote Code Execution RCE Authenticated Exploit Author: Daniel Barros @cupc4k3d - Hakai Offensive Security Vendor Homepage: https://www.uvdesk.com Software Link: https://github.com/uvdesk/community-skeleton Version: 1.1.3 Example: python3 CVE-2023-39147....

Exploit for SQL Injection in Cisco Smart_Software_Manager_On-Prem

CVE-2023-20110 PoC script for CVE-2023-20110 -...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Ibexa Ezplatform-Graphql

CVE-2022-41876 - eZ Platform user information disclosure A vu...

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947-ex...

Exploit for SQL Injection in Woocommerce

CVE-2021-32790 This is a Proof of Concept for the WooCommerce...

NTLMRawUnHide - A Python3 Script Designed To Parse Network Packet Capture Files And Extract NTLMv2 Hashes In A Crackable Format

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The tool was developed to extract NTLMv2 hashes from files generated by native Windows binaries like NETSH.EXE and PKTMON.EXE without conversion. The following bina...

Mersive Solstice 2.8.0 Remote Code Execution

Exploit Title: Mersive Solstice 2.8.0 - Remote Code Execution Google Dork: N/A Date: 2016-12-23 Exploit Author: Alexandre Teyar Vendor Homepage: https://www2.mersive.com/ Firmware Link: http://www.mersive.com/Support/Releases/SolsticeServer/SGE/Android/2.8.0/Solstice.apk Versions: 2.8.0 Tested On...

Cisco node-jos < 0.11.0 - Re-sign Tokens

!/usr/bin/env python3 import base64 from urllib.parse import quoteplus import rsa import sys zi0Black ''' EDB Note: This has been updated https://github.com/offensive-security/exploitdb/pull/139 POC of CVE-2018-0114 Cisco node-jose = 8 return b::-1 def generateheaderpayloadpayload,pubkey: create...

Exploit for Code Injection in Samba

SambaHunter It is a simple script to exploit RCE for Samba CV...

WordPress Plugin Users Ultra 1.5.50 - Unrestricted Arbitrary File Upload

Exploit Title: WordPress Users Ultra Plugin Unrestricted File Upload Discovery Date: 2015/10/27 Public Disclosure Date: 2015/12/01 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://usersultra.com Software Link:...