Light

rhinosecuritylabs / cves Goto Github PK

View Code? Open in Web Editor NEW

789.0 41.0 236.0 19.79 MB

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

License: BSD 3-Clause "New" or "Revised" License

Python 67.83% HTML 8.71% Shell 9.86% PowerShell 1.07% Ruby 12.53%

cves's Introduction

Rhino CVE Proof-of-Concept Exploits

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

cves's People

Contributors

Stargazers

Watchers

Forkers

sasqwatch harry1080 cyberbuck materaj2 crackercat googu0 0c0c0f flatl1neapt 1m15m3 zhouat xalxl shad0w008 huangyuan666 l3ngd0n b0g-lab lotus321 shaiful-systema qsdj freeide killvxk yeryco nhanledinh vmkc trungnd51 r4b3rt pentestbr threatpage sunycor pandasec888 lordsky mea0w whojeff ahrendsschmidt bigbigx dr0op yut0u timeshu fengzihk authore jas502n kesonn bbhood jackkong1 lioneijonson jianzhongma 1337g shaunstanislauslau hkylin raystyle whizsail rajivraj kfoxw peterdocter vikasvarshney 02bx s1kr10s lanzous y1ngz1 conanjun greedycoco arryboom linchenkity w1ck3dth1ngs hllcaiji123 catcherman kevil-hui imulmul riviera12345 luwikes ninefiger kenanat modulexcite wh0amis farr1617 shouwang52 itsns rhino-robertf takecareoff xiaokuoai anixet wcute loligoshujinsama ronoski 0xfatty qqdaxingxing 0xbadca7 w20di yussaffi lpzsec omarkurt lczgywzyy caleb20000 kipyegonmark aiwennba ttuanhung ttstcy1 fishers9 zstreamer mmg1 3453-315h

cves's Issues

CVE-2022-25237 wrong default username and password, and some type error.

CVEs/CVE-2022-25237/CVE-2022-25237.py

Line 33 in 7d55455

platform_default_password = "platformAdmin"

        bonita_default_user = "install"
        bonita_default_password = "install"
        platform_default_user = "platformAdmin"
        platform_default_password = "platform"

CVEs/CVE-2022-25237/CVE-2022-25237.py

Line 33 in 7d55455

platform_default_password = "platformAdmin"

shoud be change

platform_default_user = "platformAdmin"

CVE-2019-0227: wrong link

Hi,

I'm checking this Axis vulnerability as part of the Debian LTS team.

In your disclosure you mention a SSRF patch from Apache, but the link points to an old 2017 binary Jenkins build of Axis.
In addition all the upstream dev/SVN links for Axis appear to be broken nowadays.

Is the SSRF patch referenced under this CVE?
Do you have a patch URL?

Python 3 syntax errors

flake8 testing of https://github.com/RhinoSecurityLabs/CVEs on Python 3.7.1
$ flake8 . --count --select=E9,F63,F72,F82 --show-source --statistics

./CVE-2018-1335/CVE-2018-1335.py:13:63: E999 SyntaxError: invalid syntax
	print "Usage: python CVE-2018-1335.py <host> <port> <command>"
                                                              ^
./CVE-2019-5674/CVE‑2019‑5674.py:21:31: E999 SyntaxError: invalid syntax
    print '[+] Writing command'
                              ^
./CVE-2019-0227/CVE-2019-0227.py:76:32: E999 SyntaxError: invalid syntax
	print "[+] Waiting to redirect"
                               ^
3     E999 SyntaxError: invalid syntax
3

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.