18 matches found
CVE-2019-5420.rb
CVE-2019-5420.rb POC Exploit written in Ruby Input your cookies from the target app into the script and run via ruby ./exploit.rb...
ermir
Ermir Ermir 是一个邪恶/流氓 RMI 注册表,它利用对调用其标准 RMI 方法(list/lookup/bind/rebind/unbind)的任何 Java 代码进行不安全反序列化的漏洞。 要求 Ruby v3 或更新版本。 安装 从 rubygems.org 安装 Ermir: root@kitploit: $ gem install ermir 或克隆仓库并构建 gem: root@kitploit: $ git clone https://github.com/hakivvi/ermir.git $ rake install 用法 Ermir 是一个 CLI...
CVE-2023-23752
CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...
lempo
Lempo: LDAP Exposure on POrtainer CVE-2018-19466 | Mauro Eldritch AKA plaguedoktor root@kitploit: ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD This exploit is a complement to my talk Hacking Docker with PAZUZU. Presentations | Date| Conference| Link to Video| Link to Slides ---|---|---|---|--- 1...
CVE-2022-35914
Script in Ruby for the CVE-2022-35914 - RCE in GLPI CVE-2022-35914 Just add the Target to the Script. Usage: root@kitploit: ruby.exe exploit.rb = whoami You can close with: root@kitploit: = exit...
IIS_6.0_WebDAV_Ruby
IIS6.0WebDAVRuby 针对 IIS 6.0 缓冲区溢出的 Ruby 漏洞利用工具 CVE-2017-7269 此漏洞利用工具利用了由 Zhiniang Peng 和 Chen Wu 发现的 ScStoragePathFromUrl 缓冲区溢出漏洞。 用法: ruby exploit.rb Encoding option 表示必填选项。...
programming-for-penetration-testing-buffer-overflow-exploit
Buffer Overflow Exploit in Ruby Overview This project was...
EUVD-2017-0305
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2016-2339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable heap overflow vulnerability exists in the Fiddle::Function.new initialize function functionality of Ruby. In Fiddle::Function.new initialize heap...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla! options Arguments - url: Root URL base...
metasploit-framework
This is an exploit module for the Metasploit Framework, a penetration testing tool. The module is designed to target a specific vulnerability in a Windows system, exploiting the SMB protocol to gain remote code execution. The module is written in Ruby and is part of the Metasploit Framework's...
Exploit for Improper Input Validation in Drupal
CVE-2018-7600 | Drupal 8.5.x --verbose --authentication...
Publish-It 3.6d - '.pui' Local Buffer Overflow (SEH)
!/usr/bin ruby env Exploit Title: Publish-It 3.6d - SEH Buffer Overflow Date: 8/2/2014 Exploit Author: Muhamad Fadzil Ramli Vendor HomePage: https://www.postersw.com Software Link: https://www.postersw.com/publish3.exe Version App: v3.6d Tested on: Windows 7 x86 - Version 6.1.7600 CVE:None Notes:...
Steinberg MyMp3PRO 5.0 - Local Buffer Overflow (SEH) (DEP Bypass + ROP)
!/usr/bin/ruby print ''' Steinberg MyMp3PRO v5.0 Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044 eip=0x7C86467B.pack'V'7C86467B FFE4 JMP ESP kernel32.dll nops="\x90" 100 landing zone...
iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS
Exploit for unknown platform in category dos / poc =============================================================== iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS =============================================================== Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne...
Media Commands - '.m3l' File Local Buffer Overflow
!/usr/bin/env ruby Media Commands .m3l Local Buffer Overflow Exploit By Mountassif Moad Down : http://www.mediacommands.com/download/&product=MCV100A.exe C:\ncnc -v 127.0.0.1 5555 DNS fwd/rev mismatch: localhost != stack-f286641 localhost 127.0.0.1 5555 ? open Microsoft Windows XP version 5.1.260...
Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Exploit
Exploit for macOS platform in category local exploits ============================================================== Apple Mac OS X mountsmbfs Stack Based Buffer Overflow Exploit ============================================================== / Copyright C 2007-2008 Subreption LLC. All rights...
MOAB-01-01-2007: Apple Quicktime rtsp URL Handler Stack-based Buffer Overflow
Summary The following description of the software is provided by vendor Apple: QuickTime 7 makes the future of video crystal clear with new features including user-friendly controls and pristine H.264 video. Upgrade to QuickTime 7 Pro and capture your own movies, then share them with friends and...