Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

77.151exploits catalogados

35.370CVEs con explotación pública

24.695probados en laboratorio

Todos Exploit-DB 24.451Referência 22.233GitHub PoC 14.119VulnCheck XDB 8617Nuclei 4257Metasploit 3474✓ solo verificadosrecientes populares riesgo

14.119 exploits

GitHub PoC

Playbooks 'Fix for CVE-2015-0235(GHOST)' running on Ansible

CVE-2015-0235—29 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC★ 1

gethostbyname*() buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability

CVE-2015-0235—29 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC★ 1

Ansible playbook, to check for CVE-2015-0235 (GHOST) vulnerability

CVE-2015-0235—28 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC★ 1

furyutei/CVE-2015-0235_GHOST

CVE-2015-0235—28 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC

CVE-2015-0235 patches lenny libc6 packages for amd64

CVE-2015-0235—28 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC★ 3

A chef cookbook to test the GHOST vulnerability

CVE-2015-0235—27 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC★ 6

Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security

CVE-2015-0235—27 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC★ 15

Ansible playbook to check vulnerability for CVE-2015-0235

CVE-2015-0235—27 ene 2015

Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18,

60RIESGO

GitHub PoC★ 94

Gain privileges:system -> root,as a part of https://github.com/retme7/CVE-2014-7911_poc

CVE-2014-4322—26 ene 2015

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Andr

23RIESGO

GitHub PoC

day6reak/CVE-2014-1773

CVE-2014-1773—20 ene 2015

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service

35RIESGO

GitHub PoC★ 2

tjjh89017/cve-2014-6332

CVE-2014-6332HIGHbajo ataque14 ene 2015

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

100RIESGO

GitHub PoC★ 18

cve2014-3153 exploit for ubuntu x86

CVE-2014-3153HIGHbajo ataque12 ene 2015

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two diff

98RIESGO

GitHub PoC★ 3

CVE-2014-0196: Linux kernel pty layer race condition memory corruption

CVE-2014-0196MEDIUMbajo ataque17 dic 2014

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver a

68RIESGO

GitHub PoC★ 2

NTP monlist scanner CVE-2013-5211

CVE-2013-5211—14 dic 2014

The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service

60RIESGO

GitHub PoC★ 13

Python scripts to exploit CVE-2014-9016 and CVE-2014-9034

CVE-2014-9016—01 dic 2014

The password hashing API in Drupal 7.x before 7.34 and the Secure Password Hashes (aka phpass) module 6.x-2.x before 6.x

60RIESGO

GitHub PoC★ 5

app turn nil publics and privates into blanks 3 months ago config Use bundler/setup for more graceful bundler related failures 11 days ago data Add token fiddling from nishang 12 hours ago db Revert "Diff triggering comment" 12 days ago documentation Switch to Msf::OperatingSystems::Match::WINDOWS 2 months ago external Use PDWORD_PTR and DWORD_PTR 29 days ago features Up aruba timeout for simplecov overhead 4 days ago lib Check for load errors in reload_all 4 days ago modules Land #4255 - CVE-2014-6332 Internet Explorer 19 hours ago plugins Land #3588, @tobd-r7's Fix SpaceBeforeModifierKeyword Rubocop warning 4 months ago script rails generate cucumber:install 3 months ago scripts delete the old script a month ago spec Remove debug file writes 2 days ago test Fix up comment splats with the correct URI a month ago tools Fix bugs 24 days ago .gitignore Add note about rbenv for rvm .versions.conf local override 24 days ago .gitmodules Add RDI submodule, port Kitrap0d a year ago .mailmap Add @trosen-r7's alias for commits 6 months ago .rspec Add modern --require to .rspec 2 months ago .rubocop.yml Reapply PR #4113 (removed via #4175) 18 days ago .ruby-gemset Restoring ruby and gemset files 6 months ago .ruby-version Oh good, another Ruby version bump 14 days ago .simplecov Remove fastlib 2 months ago .travis.yml Enable fast_finish on travis-ci 12 days ago .yardopts Various merge resolutions from master <- staging 4 months ago CONTRIBUTING.md Add a don't to CONTRIBUTING about merge messages 11 days ago COPYING With 66 days left in 2014, may as well update a month ago Gemfile metasploit-credential bump to 0.13.3 16 days ago Gemfile.local.example Various merge resolutions from master <- staging 4 months ago Gemfile.lock Bump mdm version number 12 days ago HACKING Update link for The Metasploit Development Environment 5 months ago LICENSE Remove fastlib 2 months ago README.md Encourage use of the installer for users. 8 months ago Rakefile Merge branch 'feature/MSP-11130/metasploit-framework-spec-constants' … 24 days ago metasploit-framework-db.gemspec metasploit-credential bump to 0.13.3 16 days ago metasploit-framework-full.gemspec Update metasploit-framework-full.gemspec 23 days ago metasploit-framework-pcap.gemspec Depend on metasloit-framework in optional gemspecs 24 days ago metasploit-framework.gemspec Update meterpreter_bins to 0.0.11 18 days ago msfbinscan Remove fastlib 2 months ago msfcli Fix thread-leaks in msfcli spec 17 days ago msfconsole @wvu-r7 is a skilled negotiator. s/stdout/stderr/ a month ago msfd Remove fastlib 2 months ago msfelfscan Remove fastlib 2 months ago msfencode Remove fastlib 2 months ago msfmachscan Remove fastlib 2 months ago msfpayload fixes merge conflicts msfpayload & exe a month ago msfpescan Remove fastlib 2 months ago msfrop Remove fastlib 2 months ago msfrpc Remove fastlib 2 months ago msfrpcd Remove call to legacy db.sink queue, closes #4244 7 days ago msfupdate Always use maybe_wait_and_exit in msfupdate a year ago msfvenom Fix #4047 - undefined method `rank' due to an invalid encoder name 19 days ago README.md

CVE-2014-6332HIGHbajo ataque29 nov 2014

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

100RIESGO

GitHub PoC★ 9

Spydir is a small utility to monitor file changes in Windows directory regardless of subdirectory and files permissions (exploits CVE-2007-0843)

CVE-2007-0843—27 nov 2014

The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions

23RIESGO

GitHub PoC★ 3

PowerShell CVE-2014-4113

CVE-2014-4113HIGHbajo ataque19 nov 2014

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 a

100RIESGO

GitHub PoC★ 1

CVE-2000-0170

CVE-2000-0170—08 nov 2014

Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variabl

23RIESGO

GitHub PoC★ 2

:scream: Python library and utility for CVE-2014-6271 (aka. "shellshock")

CVE-2014-6271CRITICALbajo ataque06 nov 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC★ 5

DEPRECATED: Chef cookbook to audit & remediate "Shellshock" (BASH-CVE-2014-7169)

CVE-2014-7169CRITICALbajo ataque31 oct 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of

100RIESGO

GitHub PoC★ 10

Exploit for CVE-2014-7236

CVE-2014-7236—12 oct 2014

Eval injection vulnerability in lib/TWiki/Plugins.pm in TWiki before 6.0.1 allows remote attackers to execute arbitrary

50RIESGO

GitHub PoC★ 1

Heartbleed (CVE-2014-0160) SSLv3 Scanner

CVE-2014-0160HIGHbajo ataque12 oct 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RIESGO

GitHub PoC★ 7

Repository for CVE-2014-4936 POC code.

CVE-2014-4936—05 oct 2014

The upgrade functionality in Malwarebytes Anti-Malware (MBAM) consumer before 2.0.3 and Malwarebytes Anti-Exploit (MBAE)

43RIESGO

GitHub PoC★ 3

Libsafe - Safety Check Bypass Vulnerability (Proof of Concept Exploit & Time Randomization to Thwart It)

CVE-2005-1125—04 oct 2014

Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass li

23RIESGO

GitHub PoC★ 11

Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock

CVE-2014-6271CRITICALbajo ataque03 oct 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC

This module determine the vulnerability of a bash binary to the shellshock exploits (CVE-2014-6271 or CVE-2014-7169) and then patch that where possible

CVE-2014-6271CRITICALbajo ataque29 sep 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC★ 1

ryeyao/CVE-2014-6271_Test

CVE-2014-6271CRITICALbajo ataque29 sep 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC★ 13

shellshock CVE-2014-6271 CGI Exploit, Use like Openssh via CGI

CVE-2014-6271CRITICALbajo ataque29 sep 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

GitHub PoC★ 2

CVE-2014-6271 Remote Interactive Shell - PoC Exploit

CVE-2014-6271CRITICALbajo ataque29 sep 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which

100RIESGO

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.