cve-2022-22963

Spring Cloud Function SpEL - cve-2022-22963 Erstellen root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22963.git $ cd cve-2022-22963 $ docker build . -t spring-spel-0day $ docker run -p 8080:8080 --name spring-spel-0day spring-spel-0day Payload root@kitploit:...

cve-2021-42013-docker-lab

CVE-2021-42013 Introdução Foi descoberto que a correção para CVE-2021-41773 no Apache HTTP Server 2.4.50 era insuficiente. Um atacante poderia usar um ataque de path traversal para mapear URLs para arquivos fora dos diretórios configurados por diretivas do tipo Alias. Se arquivos fora desses...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server sfruttato Apache HTTP Server CVE-2021-41773 sfruttato in natura CVE-2021-42013: Path Traversal ed esecuzione di codice remoto in Apache HTTP Server 2.4.49 e 2.4.50 fix incompleto di CVE-2021-41773 Shodan oneliner...

electroniz3r

electroniz3r Take over macOS Electron apps' TCC permissions with electroniz3r. The tool has been presented for the first time on DEFCON31 in Las Vegas during my ELECTRONizing macOS privacy - a new weapon in your red teaming armory talk. Overview root@kitploit: $ electroniz3r OVERVIEW: macOS Red...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Docker Ngrok-Konfiguration CVE-2018-11235-Git PoC und Tunneling mit Docker Ngrok Dockerfile erstellen root@kitploit: $ docker build -t cve-2018-11235 . Benutzerdefiniertes Netzwerk für ngrok erstellen root@kitploit: $ docker network create myngroknet...

mantis_rce

mantisrce Python-Skript, um RCE auf Mantis Bug Tracker vor Version 1.2.x zu erlangen Weitere Informationen finden Sie unter CVE-2008-4687...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Esecuzione di codice remoto su Microsoft Exchange Server tramite chiavi crittografiche fisse Come eseguire ysonet.exe: scarica da qui Avvia il server HTTP: root@kitploit: python3 -m http.server 8000 Modifica targeturl e il tuo indirizzo IP nel comando pwsh. Installa...

Node.js-CVE-2017-5941

Demo della vulnerabilità di deserializzazione non sicura in NodeJS Node.js è un ambiente di runtime open-source utilizzato per implementare funzionalità server in JavaScript. Un pacchetto software specifico all'interno di Node.js contiene una funzione vulnerabile che gestisce la deserializzazione...

bluekeep

CVE-2019-0708 alias Bluekeep Scanner Un semplice scanner per determinare la vulnerabilità di sistema al CVE-2019-0708. Questa è una portabilità in Python del modulo scanner originale di metasploit di JaGoTu e zerosum0x0, disponibile su Github qui. Prova di concetto Prova di concetto di RCE tramit...

CVE-2024-6387

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos o retorno seguro de todos os cidadãos feitos reféns pelo grupo terrorista Hamas. Não descansaremos até que todos os reféns sejam libertados e voltem para casa em segurança. Você pode ajudar a trazê-los de volta.https://stories.bringthemhomenow.net/...

CVE-2023-22047

Beschreibung: CVE-2023-22047 ist ein nicht authentifizierter Datei-Lesevorgang in Oracle PeopleSoft. Fortgeschrittene Angreifer können diese Schwachstelle jedoch ausnutzen, um Remote-Code-Ausführung Remote Code Execution, RCE zu erzielen. In der PeopleSoft-Anwendung "Portal.war" ermöglicht das...

CVE-2020-2950

Oracle-BI CVE-2020-2950 AMF Deserialisierung Version: 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 Installation:https://www.sql.edu.vn/obiee/oracle-business-intelligence-12c/ Referenz: https://peterjson.medium.com/cve-2020-2950-turning-amf-deserialize-bug-to-java-deserialize-bug-2984a8542b6f Exploit - PoC...

CVE-2020-28653

CVE-2020-28653 Version: 2016 - 2020 vor dem Patch Verwendung: root@kitploit: python exploit.py http://vuln-web.com...

cve-2018-1273

CVE-2018-1273 Spring Data Commons RCE vulnerabilità di esecuzione remota di comandi uso root@kitploit: C:\Users\CTF\Desktoppython cve-2018-1273.py / / | / / /| |/ : touch /tmp/jas502n 405, May Have a CVE-2018-1273 vulnerability! CVE-2018-1273 Vulnerability Exit! Cmd : Richiesta BurpSuite:...

wso2-rce-cve-2022-29464

CVE-2022-29464 استغلال WSO2 RCE CVE-2022-29464. التفاصيل CVE-2022-29464 هو ثغرة حرجة في WSO2 اكتشفها Orange Tsai. الثغرة هي رفع ملفات عشوائي غير مقيد وغير مصادق عليه، مما يسمح للمهاجمين غير المصادق عليهم بالحصول على RCE على خوادم WSO2 عبر رفع ملفات JSP خبيثة. المسار القابل للاستغلال هو /fileuploa...

CVE-2024-20931

CVE-2024-20931 CVE-2024-20931, dies ist die Umgehung des Patches von CVE-2023-21839 Oracle Weblogic Verwendung: Richten Sie JNDI ein, das spezifische von https://github.com/WhiteHSBG/JNDIExploit/ Exploit: root@kitploit: java -jar CVE-2024-20931.jar Please input target IP:127.0.0.1 Please input...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

doctrack

Doctrack Strumento per manipolare e armare i documenti Office Open XML. Caratteristiche Creare documenti Office Open XML Word, Excel Inserire pixel di tracciamento e percorsi UNC Iniezione di modelli remoti Inserire parti CustomXML Ispezionare URL target esterni, metadati e parti XML personalizza...

CVE-2024-3400-RCE-Scan

Dork per la Mappatura del Cyberspazio Fofa root@kitploit: app="paloalto-GlobalProtect" https://en.fofa.info/result?qbase64=YXBwPSJwYWxvYWx0by1HbG9iYWxQcm90ZWN0Ig%3D%3D Zoomeye root@kitploit: app:"Palo Alto Networks firewall httpd"...

MaccaroniC2

MaccaroniC2 - AsyncSSH का उपयोग करके कमांड और कंट्रोल को सशक्त बनाना MaccaroniC2 एक प्रूफ-ऑफ-कॉन्सेप्ट कमांड और कंट्रोल फ्रेमवर्क है जो शक्तिशाली AsyncSSH पायथन लाइब्रेरी का उपयोग करता है, जो SSHv2 प्रोटोकॉल का एक एसिंक्रोनस क्लाइंट और सर्वर कार्यान्वयन प्रदान करती है और PyNgrok रैपर का उपयोग ngr...