git clone https://github.com/WangYihang/Exploit-Framework (Download Exploit-Framework)
cd Exploit-Framwork
sudo python framework.py (Run Exploit-Framework)
Update: cd Exploit-Framework && git pull
Exploits
| Vendor | Vulnerability | Effected Version | Description | Author |
|---|---|---|---|---|
| zblog | NOT_CVE | <=1.5.1 | Zblog Authenticated LFI | @Shutdown_r |
| OpenSNS | NOT_CVE | <=3.31 | OpenSNS UnAuthenticated GetShell | @90sec |
| Joomla | CVE-2015-8562 | 1.5<3.45 | Joomla Header Unauthenticated RCE | @Andrew McNicol |
| Codiad | CVE-2017-11366 | <=2.8.3 | Codiad Authenticated RCE | @WangYihang |
| Codiad | CVE-2014-9581 | <=2.4.3 | Codiad Authenticated LFI | @TaurusOmar |
| SeaCMS | CVE-2017-17561 | <=6.56 | SeaCMS Authenticated GetShell | @WangYihang |
| SeaCMS | NOT_CVE | <=6.28 | SeaCMS UnAuthenticated RCE | @没穿底裤 |
| phpMoAdmin | CVE-2015-2208 | <=1.1.2 | phpMoAdmin UnAuthenticated RCE | Unknown |
| WordPress | CVE-2017-5487 | <4.7.1 | WordPress Username Enumeration | @Dctor |
| DedeCMS | NOT_CVE | <=5.6 | DedeCms recommend.php SQL injection | @没穿底裤 |
| Kernel | CVE-2016-5195 | 2.6.22<3.9 | DirtyC0w Privilege Escalation | @nowsecure |
Example:
Help menu
gravityfalls@GitHackTools:~/Exploit-Framework$ sudo python framework.py
===================================================
| Exploit Framework (v0.0.1) |
| https://github.com/wangyihang/exploit-framework |
===================================================
[Framework]=> help
Core Commands
=============
Command Description
------- -----------
help show help
version show version
use Selects a module by name
show Displays modules of a given type, or all modules
search Searches module names and descriptions
back Move back from the current context
quit quit
Module Commands
=============
Command Description
------- -----------
options Displays global options or for one or more modules
info Displays information about one or more modules
WIKI: https://github.com/WangYihang/Exploit-Framework/wiki
Contribution: Guidance of writing exploit module


No comments:
Post a Comment