Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.284exploits catalogados

35.465CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.301GitHub PoC 14.134VulnCheck XDB 8.635Nuclei 4.289Metasploit 3.474✓ só verificadosrecentes populares risco

14.131 exploits

GitHub PoC

Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160.

CVE-2014-0160HIGHsob ataque13 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 5

POC for CVE-2014-0160 (Heartbleed) for DTLS

CVE-2014-0160HIGHsob ataque12 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 6

Script to find Exit and Guard nodes in the Tor Network, that are still suffering from CVE-2014-0160

CVE-2014-0160HIGHsob ataque12 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 2

OpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner.

CVE-2014-0160HIGHsob ataque11 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

CVE-2014-0160 scanner

CVE-2014-0160HIGHsob ataque11 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

CVE-2014-0160 mass test against subdomains

CVE-2014-0160HIGHsob ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 2

This repo contains a script to automatically test sites for vulnerability to the Heartbleed Bug (CVE-2014-0160) based on the input file for the urls.

CVE-2014-0160HIGHsob ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 2

Test CIDR blocks for CVE-2014-0160/Heartbleed

CVE-2014-0160HIGHsob ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 8

Heartbleed variants

CVE-2014-0160HIGHsob ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

ice-security88/CVE-2014-0160

CVE-2014-0160HIGHsob ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 1

OpenSSL Heartbleed (CVE-2014-0160) Fix script

CVE-2014-0160HIGHsob ataque10 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

Chrome extension that automatically checks visited sites for vulnerability to OpenSSL CVE-2014-0160

CVE-2014-0160HIGHsob ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 170

Test for SSL heartbeat vulnerability (CVE-2014-0160)

CVE-2014-0160HIGHsob ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 1

A firefox extension and checker for CVE-2014-0160

CVE-2014-0160HIGHsob ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 2

Checks for vulnerabilities: CVE-2014-0160

CVE-2014-0160HIGHsob ataque09 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 40

OpenSSL TLS heartbeat read overrun (CVE-2014-0160)

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 330

Heartbleed (CVE-2014-0160) client exploit

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 19

Patch openssl #heartbleed with ansible

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 2

Mass, multithreaded testing for servers against Heartbleed (CVE-2014-0160).

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

obayesshelton/CVE-2014-0160-Scanner

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 572

Multi-threaded tool for scanning many hosts for CVE-2014-0160.

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC

openssl Heart Bleed Exploit: CVE-2014-0160 Mass Security Auditor

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 452

OpenSSL CVE-2014-0160 Heartbleed vulnerability test

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 7

bleed is a tool to test servers for the 'Heartbleed' vulnerability (CVE-2014-0160).

CVE-2014-0160HIGHsob ataque08 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 2.389

A checker (site and tool) for CVE-2014-0160

CVE-2014-0160HIGHsob ataque07 abr 2014

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe

100RISCO

GitHub PoC★ 3

Attempts to exploit CVE-2012-3137 on vulnerable Oracle servers

CVE-2012-3137—29 mar 2014

The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all

35RISCO

GitHub PoC★ 8

Android Data Stealing Vulnerability

CVE-2010-4804—06 fev 2014

The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// UR

43RISCO

GitHub PoC★ 199

Linux local root exploit for CVE-2014-0038

CVE-2014-0038—02 fev 2014

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo

50RISCO

GitHub PoC★ 8

Automated exploit for CVE-2012-3153 / CVE-2012-3152

CVE-2012-3153—28 jan 2014

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and

60RISCO

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.