RCE 0-day for GhostScript 9.50 - Payload generator

Last update: Dec 14, 2022

Overview

RCE-0-day-for-GhostScript-9.50

PoC for RCE 0-day for GhostScript 9.50 - Payload generator

The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository (Tested with default settings of ImageMagick on Ubuntu 20.04)

This project is created only for educational purposes and cannot be used for law violation or personal gain.

The author of this project is not responsible for any possible harm caused by the materials of this project.

Original finding and awesome research from Emil Lerner: https://twitter.com/emil_lerner/status/1430502815181463559

Usage: `python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>`

Demo

Noted for php-imagemagick, sometime you must find the correct `fd/<number>`. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).

Owner

Just another web warrior ⚔️

GitHub Repository

CVE-2022-21907 - Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

CVE-2022-21907 Description POC for CVE-2022-21907: Windows HTTP协议栈远程代码执行漏洞 creat

365 Nov 30, 2022

Natural Language Processing - Sommer Semester 2022

Natural Language Processing (DIS25a/NLP) This course can be taken for the Bachelor Programm Data and Information Science (DIS25a) or the Master Progra

19 Sep 07, 2022

Exploit and Check Script for CVE 2022-1388

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage Check against single host python3 CVE-2022-1388.py -v true -u target_url At

52 Dec 22, 2022

Discord Token Stealer Malware Protection

TokenGuard TokenGuard, protect your account, prevent token steal. Totally free and open source Discord Server: https://discord.gg/EmwfaGuBE8 Source Co

10 Nov 23, 2022

PreviewGram is for users that wants get a more private experience with the Telegram's Channel.

1 Sep 25, 2022

Python3 script for scanning CVE-2021-44228 (Log4shell) vulnerable machines.

Log4j_checker.py (CVE-2021-44228) Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a v

8 Feb 27, 2022

Password list generator for password spraying - prebaked with goodies

Generates permutations of Months, Seasons, Years, Sports Teams (NFL, NBA, MLB, NHL), Sports Scores, "Password", and even Iterable Keyspaces of a specified size.

65 Dec 22, 2022

cve-2021-21985 exploit

cve-2021-21985 exploit 0x01 漏洞点分析可见： https://attackerkb.com/topics/X85GKjaVER/cve-2021-21985?referrer=home#rapid7-analysis 0x02 exploit 对beans对象进行重新构

105 Nov 22, 2022

Buffer Overflow para SLmail5.5 32 bits

SLmail5.5-Exploit-BoF Buffer Overflow para SLmail5.5 32 bits con un par de utilidades para que puedas hacer el tuyo REQUISITOS PARA QUE FUNCIONE: Desa

15 Jul 30, 2022

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

Pachine Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation). Installtion $ pip3 install impacket Usage Impacket v0.9.23 -

250 Dec 31, 2022

Scans all drives for log4j jar files and gets their version from the manifest

log4shell_scanner Scans all drives for log4j jar files and gets their version from the manifest. Windows and Windows Server only.

1 Dec 29, 2021

A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the given words, creating a unique and ideal wordlist to use regarding a specific target.

A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the given words, creating a unique and ideal wordlist to use regardin

39 Dec 10, 2022

RCE 0-day for GhostScript 9.50 - Payload generator

Related tags

Overview

RCE-0-day-for-GhostScript-9.50

PoC for RCE 0-day for GhostScript 9.50 - Payload generator

The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository (Tested with default settings of ImageMagick on Ubuntu 20.04)

This project is created only for educational purposes and cannot be used for law violation or personal gain.

The author of this project is not responsible for any possible harm caused by the materials of this project.

Original finding and awesome research from Emil Lerner: https://twitter.com/emil_lerner/status/1430502815181463559

Usage: `python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>`

Demo

Noted for php-imagemagick, sometime you must find the correct `fd/<number>`. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).

Owner

CVE-2022-21907 - Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

Natural Language Processing - Sommer Semester 2022

Exploit and Check Script for CVE 2022-1388

Discord Token Stealer Malware Protection

PreviewGram is for users that wants get a more private experience with the Telegram's Channel.

Python3 script for scanning CVE-2021-44228 (Log4shell) vulnerable machines.

Password list generator for password spraying - prebaked with goodies

cve-2021-21985 exploit

Buffer Overflow para SLmail5.5 32 bits

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

Scans all drives for log4j jar files and gets their version from the manifest

A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the given words, creating a unique and ideal wordlist to use regarding a specific target.

Phoenix Framework is an environment for writing, testing and using exploit code.

Used to build an XSS platform on the command line.

Script for automatic dump and brute-force passwords using Volatility Framework

Dumping revelant information on compromised targets without AV detection

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

Ethereum transaction decoder (community version).

Obfuscate your python code into a string of integers. De-obfuscate also supported.

A traceroute tool that also displays IP information

RCE 0-day for GhostScript 9.50 - Payload generator

Related tags

Overview

RCE-0-day-for-GhostScript-9.50

PoC for RCE 0-day for GhostScript 9.50 - Payload generator

The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository (Tested with default settings of ImageMagick on Ubuntu 20.04)

This project is created only for educational purposes and cannot be used for law violation or personal gain.

The author of this project is not responsible for any possible harm caused by the materials of this project.

Original finding and awesome research from Emil Lerner: https://twitter.com/emil_lerner/status/1430502815181463559

Usage: python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>

Demo

Noted for php-imagemagick, sometime you must find the correct fd/<number>. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).

Owner

CVE-2022-21907 - Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

Natural Language Processing - Sommer Semester 2022

Exploit and Check Script for CVE 2022-1388

Discord Token Stealer Malware Protection

PreviewGram is for users that wants get a more private experience with the Telegram's Channel.

Python3 script for scanning CVE-2021-44228 (Log4shell) vulnerable machines.

Password list generator for password spraying - prebaked with goodies

cve-2021-21985 exploit

Buffer Overflow para SLmail5.5 32 bits

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

Scans all drives for log4j jar files and gets their version from the manifest

A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the given words, creating a unique and ideal wordlist to use regarding a specific target.

Phoenix Framework is an environment for writing, testing and using exploit code.

Used to build an XSS platform on the command line.

Script for automatic dump and brute-force passwords using Volatility Framework

Dumping revelant information on compromised targets without AV detection

Implementation of RITA (Real Intelligence Threat Analytics) in Jupyter Notebook with improved scoring algorithm.

Ethereum transaction decoder (community version).

Obfuscate your python code into a string of integers. De-obfuscate also supported.

A traceroute tool that also displays IP information

Usage: `python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>`

Noted for php-imagemagick, sometime you must find the correct `fd/<number>`. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).