brianwrf/WordPress_4.9.8_RCE_POC

Stars
67
Rank 462,689 (Top 10 %)
Language
Created almost 6 years ago
Updated over 1 year ago

brianwrf/WordPress_4.9.8_RCE_POC

brianwrf

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A simple PoC for WordPress RCE (author priviledge), refer to CVE-2019-8942 and CVE-2019-8943.

hackUtils

It is a hack tool kit for pentest and web security research.

WinSystemHelper

A tool that checks and downloads scripts that will aid with privilege escalation on a Windows system.

HackRequests

It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.

SambaHunter

It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).

CVE-2018-11788

Apache Karaf XXE Vulnerability (CVE-2018-11788)

S2-053-CVE-2017-12611

A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)

CVE-2017-4878-Samples

CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html

myPadBuster

It is a Python+Perl script to exploit ASP.net Padding Oracle vulnerability.

S2-057-CVE-2018-11776

A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)

RTEmulation

It is a repository for Red Team emulation based on MITRE ATT&CK.

openvpn-easy-config

openvpn easy config for Ubuntu ONLY

CVE-2018-11761

Apache Tika Denial of Service Vulnerability (CVE-2018-11761)

Joomla3.7-SQLi-CVE-2017-8917

Joomla 3.7 SQL injection (CVE-2017-8917)

TechArticles

A set of tech articles.

CVE-2019-6690

It is a simple PoC of Improper Input Validation in python-gnupg 0.4.3 (CVE-2019-6690).

Magento-CVE-2016-4010

Magento Unauthorized Remote Code Execution (CVE-2016-4010)

fileBatchUpload

基于菜刀PHP一句话实现单个文件批量上传

checkVT

This is Python script to calculate SH256 for all files under the defined file path and check the scanning results on VirusTotal.com

AwesomeSOC

This repository is a set of articles about what SOC is and how SOC is working in a big Internet firm.

NagaScan

NagaScan is a distributed passive vulnerability scanner for Web application.