Scans & Exploits

This repository is intented to archive Scans & Exploits written by my own.

Completed

laravel_env_file.py - This script checks (and exploits) for Laravel's .env disclosure CVE-2017-16894

laravel_debug_disclosure.py - This script checks for Laravel's Information disclosure via Debug activated

cve_2021_3156.sh - Checker for Sudo Heap-Based Buffer Overflow Vulnerability CVE-2021-3156

Working in Progress

dotnet.py - This script implements a scan for Telerik Web UI's Cryptographic Weakness CVE-2017-9248.
Implemented: Scan for Telerik Web UI vulnerable versions
TBD: Exploiting gadget