git clone https://github.com/WangYihang/Exploit-Framework (Download Exploit-Framework)
cd Exploit-Framwork
sudo python framework.py (Run Exploit-Framework)
Update: cd Exploit-Framework && git pull
Exploits
Vendor | Vulnerability | Effected Version | Description | Author |
---|---|---|---|---|
zblog | NOT_CVE | <=1.5.1 | Zblog Authenticated LFI | @Shutdown_r |
OpenSNS | NOT_CVE | <=3.31 | OpenSNS UnAuthenticated GetShell | @90sec |
Joomla | CVE-2015-8562 | 1.5<3.45 | Joomla Header Unauthenticated RCE | @Andrew McNicol |
Codiad | CVE-2017-11366 | <=2.8.3 | Codiad Authenticated RCE | @WangYihang |
Codiad | CVE-2014-9581 | <=2.4.3 | Codiad Authenticated LFI | @TaurusOmar |
SeaCMS | CVE-2017-17561 | <=6.56 | SeaCMS Authenticated GetShell | @WangYihang |
SeaCMS | NOT_CVE | <=6.28 | SeaCMS UnAuthenticated RCE | @没穿底裤 |
phpMoAdmin | CVE-2015-2208 | <=1.1.2 | phpMoAdmin UnAuthenticated RCE | Unknown |
WordPress | CVE-2017-5487 | <4.7.1 | WordPress Username Enumeration | @Dctor |
DedeCMS | NOT_CVE | <=5.6 | DedeCms recommend.php SQL injection | @没穿底裤 |
Kernel | CVE-2016-5195 | 2.6.22<3.9 | DirtyC0w Privilege Escalation | @nowsecure |
Example:
Help menu
gravityfalls@GitHackTools:~/Exploit-Framework$ sudo python framework.py
===================================================
| Exploit Framework (v0.0.1) |
| https://github.com/wangyihang/exploit-framework |
===================================================
[Framework]=> help
Core Commands
=============
Command Description
------- -----------
help show help
version show version
use Selects a module by name
show Displays modules of a given type, or all modules
search Searches module names and descriptions
back Move back from the current context
quit quit
Module Commands
=============
Command Description
------- -----------
options Displays global options or for one or more modules
info Displays information about one or more modules
WIKI: https://github.com/WangYihang/Exploit-Framework/wiki
Contribution: Guidance of writing exploit module
No comments:
Post a Comment