CVE-2019-16405.rb

Este repositorio no tiene un README...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey Para ver cómo crear una clave falsificada y firmar el código Requisitos: openssl, main.rb que subí VISITA: https://twitter.com/exploitblizzard...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

yasuo

YASUO @0xsauby Descripción Yasuo es un script de Ruby que escanea aplicaciones web de terceros vulnerables. Mientras trabajamos en una evaluación de seguridad de red interna, externa, trabajos de redteam, etc., a menudo nos encontramos con aplicaciones web de terceros vulnerables o front-ends web...

CVE-2024-46986

CVE-2024-46986 Exploit de Camaleon CMS - Carga Arbitraria de Archivos Este repositorio contiene un script en Python que automatiza la explotación de una vulnerabilidad de carga de archivos en Camaleon CMS. La vulnerabilidad permite a un atacante cargar archivos arbitrarios como scripts de Ruby en...

HatCloud

HatCloud - discontinued HatCloud build in Ruby. It makes bypass in CloudFlare for discover real IP. This can be useful if you need test your server and website. Testing your protection against Ddos Denial of Service or Dos. CloudFlare is services and distributed domain name server services, sitti...

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerabilidad es una vulnerabilidad RCE en eval-stdin.php desactualizado. Este exploit es solo una automatización para la vulnerabilidad mencionada y aún está en desarrollo. Escrito en Ruby 3.0.4 en 2 horas, probado en Kali linux, Arch Linux, Ubuntu minimal ...

CVE-2021-41773

CVE-2021-41773 Description This script exploits CVE-2021-41773 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install root@kitploit: git clone...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop Database/Table, Add/Delete Users, Dump Databases/Table w/ option for gzip...... Plus a few extra options to make life a little easier for...

EUVD-2017-16647

Malware in sbrugna...

Exploit for CVE-2010-1485

PoC exploit for CVE-2010-1485, Exploit module/toolkit targeting XXE vulnerability. The target product/service or framework is unspecified, but the tool is designed to automate exploitation of XXE vulnerabilities in various applications. The vulnerability class/vector is XXE XML eXternal Entity. T...

Exploit for Link Following in Rarlab Unrar

A proof of concept for CVE-2022-30333 - a path traversal vulnera...

Exploit for Off-by-one Error in Sudo_Project Sudo

PoC exploit for CVE-2021-3156, an exploit module targeting the WangluoAnquan framework. The exploit is designed to demonstrate the vulnerability in the framework's UploadHandler.ashx component, which allows for arbitrary file uploads. The exploit uses a simple form submission to upload a maliciou...

Exploit for Cross-site Scripting in Tastyigniter

PoC exploit for CVE-2021-38699. The target product/service is Java, and the vulnerability class/vector is XXE XML External Entity injection. The probable entry point is the XXEinjector.rb script, which is a Ruby script that automates the exploitation of XXE vulnerabilities using direct and out of...

h1-ctf: 12 Days of Hacky Holidays write-up, but as a text-based RPG?

The flags are - flag48104912-28b0-494a-9995-a203d1e261e7 - flagb7ebcb75-9100-4f91-8454-cfb9574459f7 - flagb705fb11-fb55-442f-847f-0931be82ed9a - flag972e7072-b1b6-4bf7-b825-a912d3fd38d6 - flag2e6f9bf8-fdbd-483b-8c18-bdf371b2b004 - flag18b130a7-3a79-4c70-b73b-7f23fa95d395 -...

Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass

!/usr/bin/env ruby Title: Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass Author: noraj Alexandre ZANNI Author website: https://pwn.by/noraj/ Date: 2020-08-16 Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/3.9.2.tar.gz Version: = 3.9.2...

XXEinjector

This is an exploit module/toolkit targeting XXE XML eXternal Entity vulnerabilities. The primary CVE ID is not explicitly stated, but the tool is designed to automate exploitation of XXE vulnerabilities using direct and out-of-band methods. The target product/service is likely web applications,...

CVE-2018-8780

It was found that the methods from the Dir class did not properly handle strings containing the NULL byte. An attacker, able to inject NULL bytes in a path, could possibly trigger an unspecified behavior of the ruby script. Mitigation It is possible to test for presence of the NULL byte manually...

Homematic CCU2 2.29.23 Arbitrary File Write

!/usr/bin/ruby Exploit Title: Homematic CCU2 Arbitrary File Write Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7300 Description:...

Homematic CCU2 2.29.23 - Remote Command Execution

!/usr/bin/ruby Exploit Title: Homematic CCU2 Remote Command Execution Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7297 Description:...