CVE-2024-36104

CVE-2024-36104 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are solely the responsibility of the user. The tool author does not assume any responsibility. version = 18.12.14...

TYPO3-XSS-POC

TYPO3-XSS-POC Typo3 -v9.1.0 Persistent Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6905...

CVE-2014-91371-Wordpress-

CVE-2014-91371-Wordpress Description wordpress with Plugin Slider REvolution 4.1.4...

watchTowr-vs-WatchGuard-CVE-2025-9242

watchTowr 대 WatchGuard CVE-2025-9242 WatchGuard CVE-2025-9242 탐지 아티팩트 생성기 https://github.com/user-attachments/assets/097f099b-ba60-4223-adea-04279570460f 자세한 기술 내용은 블로그 게시물을 참조하세요. 실제 탐지 화면 python watchTowr-vs-WatchGuard-CVE-2025-9242.py --rhost 192.168.56.102 --rport 500 --lhost 192.168.56.1...

check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

CVE-2020-13942byVulHub

CVE-2020-13942byVulHub Apache Unomi Expression Language Injection RCE CVE-2020-13942 Description This vulnerability allows arbitrary command execution on systems running Apache Unomi version 1.5.1, by exploiting MVEL expression language injection. Project Page GitHub - Vulhub - Unomi CVE-2020-139...

CVE-2018-14714-POC

CVE-2018-14714-POC Apr 25 2020, Altin Thartori, github.com/tin-z Vulnerability Details System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "loadscript" URL parameter References For CVE-2018-14714 :...

CVE-2016-4463

CVE-2016-4463 An implementation of the CVE-2016-4463 exploit. Xerces 3.1.3 and below exploit. I meant to get this submitted to Exploit-DB, but I do not have a good go-to app to test this against. Java OpenSAML should be vulnerable, but it will take some time to explore this...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Create exim user and group sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Install dependencies sudo apt-get update sudo apt-get install -y make build-essential...

CVE-2018-12613

CVE-2018-12613 Modified standalone exploit ported to Python 3. Tested on Python 3.7.3, phpMyAdmin 4.8.1 running on Ubuntu 16.04 Works on Linux only. Original exploit by SSD. All credits to them. Changes made 1. Added function to exit if provided phpMyAdmin username/password is correct 2. Added...

CVE-2020-35545

CVE-2020-35545 Spotweb 1.4.9 - 'search' SQL Injection...

tcpflow

TCPFLOW 1.5.0 다운로드 디렉토리: http://digitalcorpora.org/downloads/tcpflow/ 설치 대부분의 일반적인 GNU/Linux 배포판은 저장소에 tcpflow를 포함하고 있습니다. 따라서 Debian/Ubuntu 등에서는 다음 명령어로 설치할 수 있습니다. sudo apt-get install tcpflow Fedora/RedHat/CentOS 등에서는 다음 명령어를 사용합니다. sudo dnf install tcpflow 그게 전부입니다. 어떤 이유로 이 방법이 충분하지 않다면, 소스에...

PenetrationTesting_Notes-

침투 테스트 노트 cherryTree 최신 버전을 사용하여 PenetrationTestingNotes.ctb를 엽니다 더 나은 경험을 위해 내 환경 설정을 사용할 수 있습니다...

CVE-2023-22515

CVE-2023-22515 익스플로잇 스크립트 영향을 받는 버전 8.0.0=Atlassian Confluence=8.5.1 취약점 악용 python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

rifiuti2

소개 Rifiuti2는 Windows 휴지통 INFO2 파일을 분석하기 위한 도구입니다. Windows 휴지통 분석은 일반적으로 Windows 컴퓨터 포렌식 중에 수행됩니다. Rifiuti2는 파일 삭제 시간, 삭제된 파일의 원래 경로와 크기, 그리고 휴지통 파일이 영구적으로 제거되었는지 여부를 추출할 수 있습니다. 기능과 제공하는 기능에 관심이 있다면 공식 사이트에서 자세한 정보를 확인해 주세요. 특별 참고 사항 최신 기능과 변경 사항은 NEWS 파일에서 확인할 수 있습니다. 0.8.2 덜 일반적인 아키텍처 몇 가지에 대한 ...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner This script scans an IP/range/CIDR and outputs the Microsoft Exchange Servers and Versions discovered. The specified IP/range/CIDR will be scanned with masscan on port tcp/443. After a successful scan it tries to HTTP GET "/owa/auth/logon.aspx" with curl to grab the Outlook...

CVE-2022-42889

CVE-2022-42889 Test application This repository contains a simple application using Apache Commons Text 1.10 which is vulnerable to CVE-2022-42889. Running the application Replace DemoApplication.java nc command by your host ip address. Listening with netcat: $ nc -l -p 30000 Build and run docker...

CVE-2019-12181

CVE-2019-12181 LPE Exploit For CVE-2019-12181 Serv-U FTP 15.1.6...

CVE-2021-38647

OMIGOD Proof on Concept Exploit for CVE-2021-38647 OMIGOD For background information and context, read the our blog post detailing this vulnerability: https://www.horizon3.ai/news/blog/omigod Details CVE-2021-38647 is an unauthenticated RCE vulnerability effecting the OMI agent as root. OMI agent...