Sunday, 27 May 2018

Exploit-Framework - A Exploit Framework for Website Vulnerabilities

Exploit-Framework - A Exploit Framework for Website Vulnerabilities
Install and Run
   git clone https://github.com/WangYihang/Exploit-Framework (Download Exploit-Framework)
   cd Exploit-Framwork
   sudo python framework.py (Run Exploit-Framework)

Update:  cd Exploit-Framework && git pull

Exploits
VendorVulnerabilityEffected VersionDescriptionAuthor
zblogNOT_CVE<=1.5.1Zblog Authenticated LFI@Shutdown_r
OpenSNSNOT_CVE<=3.31OpenSNS UnAuthenticated GetShell@90sec
JoomlaCVE-2015-85621.5<3.45Joomla Header Unauthenticated RCE@Andrew McNicol
CodiadCVE-2017-11366<=2.8.3Codiad Authenticated RCE@WangYihang
CodiadCVE-2014-9581<=2.4.3Codiad Authenticated LFI@TaurusOmar
SeaCMSCVE-2017-17561<=6.56SeaCMS Authenticated GetShell@WangYihang
SeaCMSNOT_CVE<=6.28SeaCMS UnAuthenticated RCE@没穿底裤
phpMoAdminCVE-2015-2208<=1.1.2phpMoAdmin UnAuthenticated RCEUnknown
WordPressCVE-2017-5487<4.7.1WordPress Username Enumeration@Dctor
DedeCMSNOT_CVE<=5.6DedeCms recommend.php SQL injection@没穿底裤
KernelCVE-2016-51952.6.22<3.9DirtyC0w Privilege Escalation@nowsecure

Example:

Help menu
gravityfalls@GitHackTools:~/Exploit-Framework$ sudo python framework.py
===================================================
|            Exploit Framework (v0.0.1)           |
| https://github.com/wangyihang/exploit-framework |
===================================================
[Framework]=> help
Core Commands
=============
Command Description
------- -----------
help show help
version show version
use Selects a module by name
show Displays modules of a given type, or all modules
search Searches module names and descriptions
back Move back from the current context
quit quit

Module Commands
=============
Command Description
------- -----------
options Displays global options or for one or more modules
info Displays information about one or more modules

WIKI: https://github.com/WangYihang/Exploit-Framework/wiki

Contribution: Guidance of writing exploit module


No comments:

Post a Comment