Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.020exploits catalogados
35.276CVEs com exploração pública
24.695testados em laboratório
14.080 exploits
GitHub PoC1
A simple implementation/code smash of a bunch of other repos
CVE-2020-1472MEDIUMsob ataqueransomware19 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC
hectorgie/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware19 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC10
CVE-2020-1472复现时使用的py文件整理打包
CVE-2020-1472MEDIUMsob ataqueransomware18 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC
Scripts to verify and execute CVE-2019-14287 as part of Research
CVE-2019-1428718 set 2020
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and se
35RISCO
abrir
GitHub PoC1
pwn3z/CVE-2018-13379-FortinetVPN
CVE-2018-13379CRITICALsob ataqueransomware17 set 2020
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.
100RISCO
abrir
GitHub PoC61
Test script for CVE-2020-1472 for both RPC/TCP and RPC/SMB
CVE-2020-1472MEDIUMsob ataqueransomware17 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC70
rsmudge/CVE-2020-0796-BOF
CVE-2020-0796CRITICALsob ataqueransomware17 set 2020
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol h
100RISCO
abrir
GitHub PoC1
pwn3z/CVE-2019-11510-PulseVPN
CVE-2019-11510CRITICALsob ataqueransomware17 set 2020
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthent
100RISCO
abrir
GitHub PoC114
PoC exploits for CVE-2020-17382
CVE-2020-1738217 set 2020
The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054).
23RISCO
abrir
GitHub PoC
Fa1c0n35/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC
victim10wq3/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC
FaFcFF41/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC1
https://github.com/dirkjanm/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC1
[CVE-2020-1472] Netlogon Remote Protocol Call (MS-NRPC) Privilege Escalation (Zerologon)
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC1
Fa1c0n35/SecuraBV-CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC111
cve-2020-1472 复现利用及其exp
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC2
cve-2020-1472_Tool collection
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC2
CVE-2020-1472 - Zero Logon vulnerability Python implementation
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC1
Zabbix Template to monitor for Windows Event Viewer event's related to Netlogon Elevation of Privilege Vulnerability - CVE-2020-1472. Monitors event ID's 5827, 5828 & 5829. See: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware16 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC8
PoC for Zerologon (CVE-2020-1472) - Exploit
CVE-2020-1472MEDIUMsob ataqueransomware15 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC1
CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware15 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC58
Ladon Moudle CVE-2020-1472 Exploit 域控提权神器
CVE-2020-1472MEDIUMsob ataqueransomware15 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC2
CVE-2020-1472漏洞复现过程
CVE-2020-1472MEDIUMsob ataqueransomware15 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC4
CVE-2020-1472复现流程
CVE-2020-1472MEDIUMsob ataqueransomware15 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC1
Serie de scripts para enumerar nombres de usuarios de JIRA a partir de vulnerabilidades conocidas (CVE-2020-14181, CVE-2019-3403, CVE-2019-8449...)
CVE-2020-1418115 set 2020
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Infor
60RISCO
abrir
GitHub PoC180
Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.
CVE-2020-1472MEDIUMsob ataqueransomware14 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC702
Exploit for zerologon cve-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware14 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC6
(CVE-2017-9841) PHPUnit_eval-stdin_php Remote Code Execution
CVE-2017-9841CRITICALsob ataque14 set 2020
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
100RISCO
abrir
GitHub PoC38
cube0x0/CVE-2020-1472
CVE-2020-1472MEDIUMsob ataqueransomware14 set 2020
Netlogon Elevation of Privilege Vulnerability
100RISCO
abrir
GitHub PoC1
H0j3n/CVE-2020-23934
CVE-2020-2393414 set 2020
An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php
28RISCO
abrir
anteriorpágina 393 / 470próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.