HatCloud

HatCloud - discontinued HatCloud build in Ruby. It makes bypass in CloudFlare for discover real IP. This can be useful if you need test your server and website. Testing your protection against Ddos Denial of Service or Dos. CloudFlare is services and distributed domain name server services, sitti...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

yasuo

YASUO @0xsauby 描述 Yasuo 是一个 Ruby 脚本，用于扫描存在漏洞的第三方 Web 应用程序。 在进行网络安全评估（内部、外部、红队任务等）时，我们经常会遇到存在漏洞的第三方 Web 应用程序或 Web 前端，这些应用允许我们通过利用公开已知的漏洞来入侵远程服务器。一些常见且受欢迎的应用程序包括 Apache Tomcat 管理界面、JBoss jmx-console、Hudson Jenkins 等。 如果你在 Exploit-db 中搜索，有超过 10,000 个远程可利用的漏洞存在于大量 Web...

CVE-2019-16405.rb

This repository does not have a README...

CVE-2024-46986

CVE-2024-46986 Camaleon CMS 漏洞利用 - 任意文件上传 该存储库包含一个 Python 脚本，用于自动化利用 Camaleon CMS 中的文件上传漏洞。该漏洞允许攻击者向服务器上传任意文件（如 Ruby 脚本），可能导致远程代码执行 RCE 或其他严重安全影响。 功能 文件上传利用 ：向目标服务器上传恶意 Ruby 脚本。 有效载荷选项 ：在反弹 Shell 有效载荷和命令执行有效载荷之间选择。 重复命令执行 ：对于命令执行有效载荷，脚本允许用户重复输入命令。 自动化 ：使用 Python 的 requests 库自动化整个过程。 前提条件 有效用户凭证...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey To see how to Make Spoofed Key and Signing the code REQ: openssl, main.rbwhich i uplaoded VISIT : https://twitter.com/exploitblizzard...

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerability is RCE vulnerability in outdated eval-stdin.php. This exploit is just automation for mentioned vulnerability and is still in development. Scripted in Ruby 3.0.4 within 2 hours, tested on Kali linux, Arch Linux, Ubuntu minimal and Termux. How to...

CVE-2021-41773

CVE-2021-41773 Descripción Este script explota CVE-2021-41773 para imprimir archivos y/o ejecutar comandos. Este script está disponible para: Nmap Python Ruby Requisitos Python python3 Biblioteca estándar de python3 Ruby Ruby Biblioteca estándar de Ruby Instalación git clone...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu es un script de cliente MySQL basado en Ruby que escribí. Hace la mayoría de las cosas que un cliente MySQL normal podría hacer: SQL Shell, Actualizar/Eliminar/Borrar Base de Datos/Tabla, Agregar/Eliminar Usuarios, Volcado de Bases de Datos/Tabla con opción de gzip...

EUVD-2017-16647

Malware in sbrugna...

Exploit for CVE-2010-1485

PoC exploit for CVE-2010-1485, Exploit module/toolkit targeting XXE vulnerability. The target product/service or framework is unspecified, but the tool is designed to automate exploitation of XXE vulnerabilities in various applications. The vulnerability class/vector is XXE XML eXternal Entity. T...

Exploit for Link Following in Rarlab Unrar

A proof of concept for CVE-2022-30333 - a path traversal vulnera...

Exploit for Off-by-one Error in Sudo_Project Sudo

PoC exploit for CVE-2021-3156, an exploit module targeting the WangluoAnquan framework. The exploit is designed to demonstrate the vulnerability in the framework's UploadHandler.ashx component, which allows for arbitrary file uploads. The exploit uses a simple form submission to upload a maliciou...

Exploit for Cross-site Scripting in Tastyigniter

PoC exploit for CVE-2021-38699. The target product/service is Java, and the vulnerability class/vector is XXE XML External Entity injection. The probable entry point is the XXEinjector.rb script, which is a Ruby script that automates the exploitation of XXE vulnerabilities using direct and out of...

h1-ctf: 12 Days of Hacky Holidays write-up, but as a text-based RPG?

The flags are - flag48104912-28b0-494a-9995-a203d1e261e7 - flagb7ebcb75-9100-4f91-8454-cfb9574459f7 - flagb705fb11-fb55-442f-847f-0931be82ed9a - flag972e7072-b1b6-4bf7-b825-a912d3fd38d6 - flag2e6f9bf8-fdbd-483b-8c18-bdf371b2b004 - flag18b130a7-3a79-4c70-b73b-7f23fa95d395 -...

Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass

!/usr/bin/env ruby Title: Bludit 3.9.2 - Authentication Bruteforce Mitigation Bypass Author: noraj Alexandre ZANNI Author website: https://pwn.by/noraj/ Date: 2020-08-16 Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/archive/3.9.2.tar.gz Version: = 3.9.2...

XXEinjector

This is an exploit module/toolkit targeting XXE XML eXternal Entity vulnerabilities. The primary CVE ID is not explicitly stated, but the tool is designed to automate exploitation of XXE vulnerabilities using direct and out-of-band methods. The target product/service is likely web applications,...

CVE-2018-8780

It was found that the methods from the Dir class did not properly handle strings containing the NULL byte. An attacker, able to inject NULL bytes in a path, could possibly trigger an unspecified behavior of the ruby script. Mitigation It is possible to test for presence of the NULL byte manually...

Homematic CCU2 2.29.23 Arbitrary File Write

!/usr/bin/ruby Exploit Title: Homematic CCU2 Arbitrary File Write Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7300 Description:...

Homematic CCU2 2.29.23 - Remote Command Execution

!/usr/bin/ruby Exploit Title: Homematic CCU2 Remote Command Execution Date: 28-03-18 Exploit Author: Patrick Muench, Gregor Kopf Vendor Homepage: http://www.eq-3.de Software Link: http://www.eq-3.de/service/downloads.html?id=268 Version: 2.29.23 CVE : 2018-7297 Description:...