RCE 0-day for GhostScript 9.50 - Payload generator

Last update: Dec 14, 2022

Overview

RCE-0-day-for-GhostScript-9.50

PoC for RCE 0-day for GhostScript 9.50 - Payload generator

The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository (Tested with default settings of ImageMagick on Ubuntu 20.04)

This project is created only for educational purposes and cannot be used for law violation or personal gain.

The author of this project is not responsible for any possible harm caused by the materials of this project.

Original finding and awesome research from Emil Lerner: https://twitter.com/emil_lerner/status/1430502815181463559

Usage: `python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>`

Demo

Noted for php-imagemagick, sometime you must find the correct `fd/<number>`. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).

Owner

Just another web warrior ⚔️

GitHub Repository

A curated list of amazingly awesome Cybersecurity datasets

758 Dec 28, 2022

CVE-2021-26084 Remote Code Execution on Confluence Servers

CVE-2021-26084 CVE-2021-26084 Remote Code Execution on Confluence Servers. Dork Fofa: app="ATLASSIAN-Confluence" Usage Show help information. python P

63 Dec 30, 2022

Password Manager is a simple Python project which helps users in managing their passwords in a easier way

4 Sep 29, 2021

ThePhish: an automated phishing email analysis tool

ThePhish ThePhish is an automated phishing email analysis tool based on TheHive, Cortex and MISP. It is a web application written in Python 3 and base

675 Jan 03, 2023

RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.

RedDrop Exfil Server Check out the accompanying MaverisLabs Blog Post Here! RedDrop Exfil Server is a Python Flask Web Server for Penetration Testers,

53 Nov 01, 2022

对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

520_APK_HOOK 介绍将msf生成的payload，注入到一个正常的apk文件中，重新打包后进行加固，bypass手机安全管家的检测。项目地址: https://github.com/cleverbao/520apkhook 作者: BaoGuo 优点相比于原始的msf远控，此版本ap

368 Jan 02, 2023

Patching - Interactive Binary Patching for IDA Pro

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in ma

589 Dec 30, 2022

Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1

CVE-2021-22911 Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1 The getPasswordPolicy method is vulnerable to NoS

47 Nov 09, 2022

A brute Force tool for Facebook

EliBruter A brute Force tool for Facebook Installing this tool -- $ pkg upgrade && update $ pkg install python $ pkg install python3 $ pkg install gi

3 Mar 29, 2022

Steal Files on a Windows Machine

File-Stealer Steal Files on a Windows Machine About This Script will steal certain Files on a Windows Machine and sends them to a FTP Server. Preview

5 Nov 17, 2022

Tor Relay availability checker, for using it as a bridge in countries with censorship

Tor Relay Availability Checker This small script downloads all Tor Relay IP addresses from onionoo.torproject.org and checks whether random Relays are

161 Dec 30, 2022

🎻 Modularized exploit generation framework

Modularized exploit generation framework for x86_64 binaries Overview This project is still at early stage of development, so you might want to come b

30 Jan 17, 2022

Credit Card And SK Checker Written In Python

💳 Credit Card Checker (CC Checker) & Mass SK Checker & Generator 💳

53 Dec 31, 2022

Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password

27 Dec 20, 2022

FTP-Exploits is a tool made in python that contains 4 diffrent types of ftp exploits that can be used in Penetration Testing.

FTP-exploits FTP-exploits is a tool which is used for Penetration Testing that can run many kinds of exploits on port 21(FTP) Commands and Exploits Ex

1 Dec 26, 2021

RCE 0-day for GhostScript 9.50 - Payload generator

Related tags

Overview

RCE-0-day-for-GhostScript-9.50

PoC for RCE 0-day for GhostScript 9.50 - Payload generator

The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository (Tested with default settings of ImageMagick on Ubuntu 20.04)

This project is created only for educational purposes and cannot be used for law violation or personal gain.

The author of this project is not responsible for any possible harm caused by the materials of this project.

Original finding and awesome research from Emil Lerner: https://twitter.com/emil_lerner/status/1430502815181463559

Usage: `python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>`

Demo

Noted for php-imagemagick, sometime you must find the correct `fd/<number>`. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).

Owner

A curated list of amazingly awesome Cybersecurity datasets

CVE-2021-26084 Remote Code Execution on Confluence Servers

Password Manager is a simple Python project which helps users in managing their passwords in a easier way

ThePhish: an automated phishing email analysis tool

RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.

对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

Patching - Interactive Binary Patching for IDA Pro

Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1

A brute Force tool for Facebook

Steal Files on a Windows Machine

Tor Relay availability checker, for using it as a bridge in countries with censorship

🎻 Modularized exploit generation framework

Credit Card And SK Checker Written In Python

Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password

FTP-Exploits is a tool made in python that contains 4 diffrent types of ftp exploits that can be used in Penetration Testing.

Script Crack Facebook Yang Kaya Akan Teh Hijau 🚶‍♂

Malware-analysis-writeups - Some of my Malware Analysis writeups

MassStringer, CTF Flag Finder

BloodyAD is an Active Directory Privilege Escalation Framework

Rouge Spammers with a mission to disrupt the peace of the valley ? Fear not we will STOMP the Spammers

RCE 0-day for GhostScript 9.50 - Payload generator

Related tags

Overview

RCE-0-day-for-GhostScript-9.50

PoC for RCE 0-day for GhostScript 9.50 - Payload generator

The PoC in python generates payload when exploited for a 0-day of GhostScript 9.50. This 0-day exploit affect to ImageMagick with the default settings from Ubuntu repository (Tested with default settings of ImageMagick on Ubuntu 20.04)

This project is created only for educational purposes and cannot be used for law violation or personal gain.

The author of this project is not responsible for any possible harm caused by the materials of this project.

Original finding and awesome research from Emil Lerner: https://twitter.com/emil_lerner/status/1430502815181463559

Usage: python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>

Demo

Noted for php-imagemagick, sometime you must find the correct fd/<number>. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).

Owner

A curated list of amazingly awesome Cybersecurity datasets

CVE-2021-26084 Remote Code Execution on Confluence Servers

Password Manager is a simple Python project which helps users in managing their passwords in a easier way

ThePhish: an automated phishing email analysis tool

RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.

对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

Patching - Interactive Binary Patching for IDA Pro

Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1

A brute Force tool for Facebook

Steal Files on a Windows Machine

Tor Relay availability checker, for using it as a bridge in countries with censorship

🎻 Modularized exploit generation framework

Credit Card And SK Checker Written In Python

Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password

FTP-Exploits is a tool made in python that contains 4 diffrent types of ftp exploits that can be used in Penetration Testing.

Script Crack Facebook Yang Kaya Akan Teh Hijau 🚶‍♂

Malware-analysis-writeups - Some of my Malware Analysis writeups

MassStringer, CTF Flag Finder

BloodyAD is an Active Directory Privilege Escalation Framework

Rouge Spammers with a mission to disrupt the peace of the valley ? Fear not we will STOMP the Spammers

Usage: `python IM-RCE-via-GhostScript-9.5.py <CMD> <Exploit-File>`

Noted for php-imagemagick, sometime you must find the correct `fd/<number>`. The easiest way for doing this stuff is fuzzylogic and something like this (Tested with Ubuntu 20.04 and default php-imagemagick installed).