Lucene search
+L

69 matches found

Kitploit
Kitploit
added 2026/09/14 5:40 p.m.9 views

CVE-2024-46986

CVE-2024-46986 Exploit de Camaleon CMS - Carga Arbitraria de Archivos Este repositorio contiene un script en Python que automatiza la explotación de una vulnerabilidad de carga de archivos en Camaleon CMS. La vulnerabilidad permite a un atacante cargar archivos arbitrarios como scripts de Ruby en...

9.9CVSS6.4AI score0.40956EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 10:50 a.m.9 views

HatCloud

HatCloud - 開発終了 HatCloudはRubyで構築されています。CloudFlareをバイパスして実際のIPアドレスを発見します。これは、サーバーやウェブサイトをテストする必要がある場合に役立ちます。DDoS(Denial of Service)やDoSに対する保護をテストすることができます。...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 4:54 a.m.7 views

CVE-2019-16405.rb

此存储库没有 README。...

9CVSS7.3AI score0.27002EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/14 12:31 a.m.6 views

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey 查看如何制作伪造密钥并签名代码 需要: openssl, main.rb我上传的 访问: https://twitter.com/exploitblizzard...

8.1CVSS7.4AI score0.89436EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/13 7:43 p.m.26 views

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:43 p.m.9 views

yasuo

YASUO @0xsauby 説明 Yasuo は脆弱なサードパーティ製 Web アプリケーションをスキャンする Ruby スクリプトです。 ネットワークセキュリティ評価(内部、外部、レッドチームの仕事など)を行っていると、よく知られた脆弱性を悪用してリモートサーバを侵害できる、脆弱なサードパーティ製 Web アプリケーションや Web フロントエンドに遭遇することがあります。よくあるお気に入りのアプリケーションとしては、Apache Tomcat 管理インターフェース、JBoss jmx-console、Hudson Jenkins などがあります。 Exploit-db...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 2:15 p.m.6 views

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 漏洞是过时的 eval-stdin.php 中的远程代码执行漏洞。 此漏洞利用程序仅是对所述漏洞的自动化工具,且仍在开发中。 使用 Ruby 3.0.4 编写(耗时 2 小时内),已在 Kali Linux、Arch Linux、Ubuntu minimal 和 Termux 上测试。 如何运行? ruby evil-eval.rb 在程序内部,当您输入 help 时,可以看到可用的命令,例如 revshell、checkconnection、privesc,这些都非常非常有用。 退出时,不应使用 CTRL+C...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits20
Kitploit
Kitploit
added 2026/09/10 1:31 a.m.5 views

CVE-2021-41773

CVE-2021-41773 描述 此脚本利用 CVE-2021-41773 来读取文件或/并执行命令。 此脚本适用于: Nmap Python Ruby 要求 Python python3 python3 标准库 Ruby Ruby Ruby 标准库 安装 root@kitploit: git clone https://github.com/mauricelambert/CVE-2021-41773.git cd CVE-2021-41773 Python pip install -r requirements.txt 用法 root@kitploit: Python python3...

9.8CVSS8AI score0.99992EPSS
SaveExploits165References3
Kitploit
Kitploit
added 2026/09/09 10:24 a.m.23 views

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu es un script de cliente MySQL basado en Ruby que escribí. Hace la mayoría de las cosas que un cliente MySQL normal podría hacer: SQL Shell, Actualizar/Eliminar/Borrar Base de Datos/Tabla, Agregar/Eliminar Usuarios, Volcado de Bases de Datos/Tabla con opción de gzip...

6CVSS5.9AI score0.31664EPSS
SaveExploits16
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2017-16647

Malware in sbrugna...

7.8CVSS7.7AI score0.01229EPSS
SaveExploits4References6
Gitee
Gitee
added 2025/07/27 4:03 a.m.104 views

Exploit for CVE-2010-1485

PoC exploit for CVE-2010-1485, Exploit module/toolkit targeting XXE vulnerability. The target product/service or framework is unspecified, but the tool is designed to automate exploitation of XXE vulnerabilities in various applications. The vulnerability class/vector is XXE XML eXternal Entity. T...

8.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 2022/07/22 1:14 a.m.465 views

Exploit for Link Following in Rarlab Unrar

A proof of concept for CVE-2022-30333 - a path traversal vulnera...

7.5CVSS7.9AI score0.99085EPSS
SaveExploits12
Gitee
Gitee
added 2021/10/12 8:51 p.m.18 views

Exploit for Off-by-one Error in Sudo_Project Sudo

PoC exploit for CVE-2021-3156, an exploit module targeting the WangluoAnquan framework. The exploit is designed to demonstrate the vulnerability in the framework's UploadHandler.ashx component, which allows for arbitrary file uploads. The exploit uses a simple form submission to upload a maliciou...

7.8CVSS8.3AI score0.99969EPSS
SaveExploits83
Gitee
Gitee
added 2021/04/29 9:43 p.m.7 views

Exploit for Cross-site Scripting in Tastyigniter

PoC exploit for CVE-2021-38699. The target product/service is Java, and the vulnerability class/vector is XXE XML External Entity injection. The probable entry point is the XXEinjector.rb script, which is a Ruby script that automates the exploitation of XXE vulnerabilities using direct and out of...

5.4CVSS8.1AI score0.07977EPSS
SaveExploits5
Hacker One
Hacker One
added 2020/12/27 3:21 a.m.62 views

h1-ctf: 12 Days of Hacky Holidays write-up, but as a text-based RPG?

The flags are - flag48104912-28b0-494a-9995-a203d1e261e7 - flagb7ebcb75-9100-4f91-8454-cfb9574459f7 - flagb705fb11-fb55-442f-847f-0931be82ed9a - flag972e7072-b1b6-4bf7-b825-a912d3fd38d6 - flag2e6f9bf8-fdbd-483b-8c18-bdf371b2b004 - flag18b130a7-3a79-4c70-b73b-7f23fa95d395 -...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/08/17 12:00 a.m.331 views

Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass

!/usr/bin/env ruby Title: Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass Author: noraj Alexandre ZANNI Author website: https://pwn.by/noraj/ Date: 2020-08-16 Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/3.9.2.tar.gz Version: = 3.9.2...

9.8CVSS5.5AI score0.39598EPSS
SaveExploits9
Gitee
Gitee
added 2020/01/24 12:38 p.m.12 views

XXEinjector

This is an exploit module/toolkit targeting XXE XML eXternal Entity vulnerabilities. The primary CVE ID is not explicitly stated, but the tool is designed to automate exploitation of XXE vulnerabilities using direct and out-of-band methods. The target product/service is likely web applications,...

7.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2020/01/03 3:50 p.m.36 views

CVE-2018-8780

It was found that the methods from the Dir class did not properly handle strings containing the NULL byte. An attacker, able to inject NULL bytes in a path, could possibly trigger an unspecified behavior of the ruby script. Mitigation It is possible to test for presence of the NULL byte manually...

9.1CVSS0.8AI score0.09718EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2018/03/31 12:00 a.m.52 views

Homematic CCU2 2.29.23 Arbitrary File Write

!/usr/bin/ruby Exploit Title: Homematic CCU2 Arbitrary File Write Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7300 Description:...

10CVSS9.2AI score0.3059EPSS
SaveExploits3
Exploit DB
Exploit DB
added 2018/03/30 12:00 a.m.37 views

Homematic CCU2 2.29.23 - Remote Command Execution

!/usr/bin/ruby Exploit Title: Homematic CCU2 Remote Command Execution Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7297 Description:...

10CVSS8.4AI score0.64251EPSS
SaveExploits3
Rows per page
Query Builder