exploits - GitLite

KO | EN

gitlite — search

#python #react #llm #rust #docker #macos #awesome #cli #kubernetes #vue #awesome-list #security #mcp #open-source

exploits

(★ 1,573)

Miscellaneous exploit code

파일 탐색기

최종 버전 다운로드 (.zip)

- - payload-ShellExecuteA.bin
  - payload-ShellExecuteA.nasm
  - tmpjmp.bin
  - tmpjmp.nasm
- asset-exploder.py
- Makefile
- README.md
- pwn.py
- README.md
- deathsize.php
- payload
- README.md
- sabreamf.min.php
- back_python.php
- delusions.py
- README.md
- diamondpwn.py
- README.md
- dloser.py
- README.md
- DoubtfullyMalignant.png
- DoubtfullyMalignant.py
- Malignant.png
- README.md
- droppleganger.py
- README.md
- soggybiscuit.php
- elastic_shell.py
- README.md
- freeacs-pwn.py
- poc.js
- README.md
- hydrapwn.py
- - no-ssl.png
  - with-ssl.png
- iislap.py
- README.md
- joomblah.py
- README.md
- filthyc0w.pht
- joomraa.py
- README.md
- back_python.php
- lucky_lotus.py
- README.md
- back_python.php
- nmediapwn.py
- README.md
- back_python.php
- moadmin.py
- README.md
- p2pool-nodestats-lfd.py
- README.md
- leak_config_dm.py
- leak_config_hr.py
- README.md
- back_python.php
- pwnflow.py
- README.md
- README.md
- screen2root.png
- screenroot.sh
- - se0wned.png
- README.md
- se0wn.py
- http_cgi_shellshock.py
- README.md
- back_python.php
- README.md
- suiteracer.py
- - SuiteShell.png
- back_python.php
- README.md
- suiteshell.py
- README.md
- torct-pwn.py
- totallynotarce.py
- README.md
- tr-06fail-ssh-d1000.py
- tr-ohfuck.png
- README.md
- unsanitary.sh
- back_python.php
- README.md
- vBullshit.py
- README.md
- sanitizedexploit.png
- wipg-exploit.py
- back_python.php
- README.md
- wpsh0pwn.py
- README.md
- xanity-pwn.py
CONTRIBUTING.md
README.md

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/XiphosResearch/exploits

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd exploits

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Make

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Make Linux/macOS는 보통 기본 설치되어 있습니다. Windows는 별도 설치(예: MSYS2, WSL)가 필요합니다.

cd AssetExploder

이 프로젝트의 관련 파일이 하위 폴더 안에 있어서, 먼저 그 폴더로 이동합니다.

make

생성된 빌드 설정을 바탕으로 실제 컴파일을 진행해 실행 파일을 만듭니다.

✅ 에러 없이 끝나면 성공입니다. 생성된 실행 파일을 직접 실행해보세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Exploits
Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes.

## Current Exploits (index may be out of date)

* phpMoAdmin Remote Code Execution (CVE-2015-2208)
* LotusCMS Remote Code Execution (OSVDB-75095)
* ElasticSearch Remote Code Execution (CVE-2015-1427)
* ShellShock (httpd) Remote Code Execution (CVE-2014-6271)
* IISlap - http.sys Denial of Service/RCE PoC (DoS only). (MS-15-034)
* se0wned - Seowintech Router diagnostic.cgi remote root
* WPsh0pwn - Wordpress WPShop eCommerce Shell Upload (WPVDB-7830)
* nmediapwn - Wordpress N-Media Website Contact Form with File Upload 1.3.4 Shell Upload
* pwnflow - Wordpress Work the flow file upload 2.5.2 Shell Upload
* delusions - Wordpress InfusionSoft Gravity Forms Shell Upload (CVE-2014-6446)
* suiteshell - SuiteCRM Post-Auth Remote Code Execution (CVE-2015-NOTYET)
* suiteracer - SuiteCRM Post-Auth Remote Code Execution Race Condition (CVE-2015-xxxx)
* unsanitary - Address Sanitizer + Setuid Binary = Local Root exploit (LD_PRELOAD vector)
* DiamondFox - DiamondFox Botnet C&C Panel Shell Upload
* DoubtfullyMalignant - BenignCertain DoS PoC
* TorCT-Shell - TorCT RAT C&C Panel Shell Upload
* vBullshit - vBulletin 5.x.x unserialize() Remote Code Execution (CVE-2015-7808)
* Xanity-Shell - Xanity RAT C&C Panel Shell Upload
* Joomraa - PoC + upload blacklist bypass (CVE-2016-8869, CVE-2016-8870, CVE-2016-9836)
* Deathsize - LifeSize Room remote code execution & local root exploit
* AssetExploder - ManageEngine Asset Explorer remote code execution
* DroppleGanger - Droppler <= 1.6.5 Auth-Bypass & RCE
* tr-06fail - TR-064 Misimplementations leading to remote device takeover in ZyXEL Routers
* screen2root - Screen 4.05.00 (CVE-2017-5618) local privesc
* FreeACS-Pwn - TR-069 exploit for FreeACS server, disclosed at BSides Edinburgh.
* Joomblah - Joomla 3.7.0 SQL Injection exploit (CVE-2017-8917)
* pisspoorpool - Local file inclusion exploit for p2pool status page
* wipgpwn - Remote Root Exploit for WePresent WiPG-1000,1500,2000 devices
* dloser - D-Link DNS-320/330/350/x Remote Root Exploit
* TBA

## Infrequently Asked Questions.

1. Why is there no "leet zerodays" in here?

Because some of our researchers don't believe in killing bugs prematurely, and the unofficial policy on disclosure is that it is at the sole discretion of the person who finds the bug.
2. Why don't you just write metasploit modules?

Reasons, namely, "ruby", amongst other things. Also, other people who are actually getting paid by Rapid7 to do such things can do such things :)
3. Why are there some old bugs in here?

The public exploits available for them were unreliable/untrustworthy/rubbish and better ones were called for, or, they are parts of ongoing experiments into various methods to make them more reliable/stealthy/whatever.

## Licence
See individual exploits for their respective licences.

## Bug Reports
We take the quality of our exploit code very seriously. If you find a bug, or an edge case where an exploit fails to succeed against a vulnerable target, do let us know immediately so said situation can be rectified via the bug tracker (issues thing on this repository), or via email/twitter.

## Changes
There is no changelogs here, as that would be too much effort, just git commits. Exploits may be updated regularly for greater stability, reliability or stealthiness, so check them for updates regularly.