Exploit Pack Pro 15.07
#exploit‌‌


Exploit Pack Pro 15.07 (as instructed to use in VM)

#exploit‌‌

CVE-2022-21971: Windows Runtime RCE

https://github.com/0vercl0k/CVE-2022-21971

#git #exploit #pentest

CVE-2022-0847: Linux Kernel LPE ("Dirty Pipe")

https://github.com/antx-code/CVE-2022-0847

#git #exploit #pentest

CVE-2022-27666: Linux LPE ("this vulnerability affects the latest Ubuntu, Fedora, and Debian")

https://github.com/plummm/CVE-2022-27666

#git #exploit #pentest

Spring4Shell Proof Of Concept:

https://github.com/BobTheShoplifter/Spring4Shell-POC

#git #exploit #pentest

CVE-2022-1329
WordPress-Elementor-3.6.0-3.6.1-3.6.2
type: RCE
#exploit #rce #poc

WSO2 RCE (CVE-2022-29464) #exploit

https://github.com/hakivvi/CVE-2022-29464

https://github.com/oppsec/WSOB

WSOB is a #python tool created to #exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

#Instagram #bruteforce #exploit module

https://github.com/chinoogawa/instaBrute

CVE-2024-38077: Windows Remote Desktop Licensing Service RCE

https://github.com/CloudCrowSec001/CVE-2024-38077-POC

Запатчено 9 июля

#exploit #ad #rce #pentest #redteam

#exploit
1. CVE-2024-42758:
Dokuwiki (indexmenu plugin) XSS
https://github.com/1s1ldur/CVE-2024-42758

2. CVE-2024-36877:
SMM Memory Corruption in MSI firmware
https://jjensn.com/at-home-in-your-firmware

#exploit
1. CVE-2024-7646:
Ingress-NGINX Annotation Validation Bypass
https://www.armosec.io/blog/cve-2024-7646-ingress-nginx-annotation-validation-bypass

2. CVE-2024-38856:
Apache OFBiz Pre-Authentication RCE (Scanner + Exploit)
https://github.com/securelayer7/CVE-2024-38856_Scanner

#exploit
CVE-2024-38063:
Windows TCP/IP RCE
]-> https://github.com/Sachinart/CVE-2024-38063-POC

#exploit
1. CVE-2024-3183:
Kerberos FreeIPA Rosting - Use of Psw Hash With Insufficient Computational Effort
https://github.com/Cyxow/CVE-2024-3183-POC

2. CVE-2024-33895:
Use of Hard-coded Cryptographic Key in Ewon Cosy+ VPN Gateway
https://seclists.org/fulldisclosure/2024/Aug/22