Skip to content

Instantly share code, notes, and snippets.

View bryanmcnulty's full-sized avatar
🔍
Hacking things

Bryan McNulty bryanmcnulty

🔍
Hacking things
View GitHub Profile
@bryanmcnulty
bryanmcnulty / CVE-2022-46169.py
Created August 28, 2023 02:57
CVE-2022-24715 :: Unauthenticated command injection on Cacti <= 1.2.22
#!/usr/bin/env python3
'''
* Written for a CTF :)
* ---
* Author: Bryan McNulty
* Contact: bryanmcnulty@protonmail.com
* Blog: https://bryanmcnulty.github.io
* GitHub: https://github.com/bryanmcnulty
* LinkedIn: https://www.linkedin.com/in/bryanmcnulty
@bryanmcnulty
bryanmcnulty / CVE-2022-24715.py
Last active July 17, 2023 06:30
Icinga Web 2 versions < 2.8.6, 2.9.0-2.9.6 Authenticated Remote Code Execution (RCE) - CVE-2022-24715
#!/usr/bin/env python3
'''
* Written for a CTF :)
* ---
* Author: Bryan McNulty
* Contact: bryanmcnulty@protonmail.com
* Blog: https://bryanmcnulty.github.io
* GitHub: https://github.com/bryanmcnulty
* LinkedIn: https://www.linkedin.com/in/bryanmcnulty
@bryanmcnulty
bryanmcnulty / CVE-2022-22963.py
Created March 18, 2023 15:19
Exploit for Spring Boot CVE-2022-22963 - Remote Code Execution
#!/usr/bin/env python3
'''
* Written for a CTF :)
* ---
* Author: Bryan McNulty
* Contact: bryanmcnulty@protonmail.com
* GitHub: https://github.com/bryanmcnulty
* ---
* Dependencies:
@bryanmcnulty
bryanmcnulty / CVE-2021-43798.py
Created January 27, 2023 11:45
Exploit for Grafana V8.0.0-beta1 - 8.3.0 - Unauthenticated Directory Traversal and Local File Read
#!/usr/bin/env python3
'''
* Written for a CTF :)
* ---
* Author: Bryan McNulty
* Contact: bryanmcnulty@protonmail.com
* GitHub: https://github.com/bryanmcnulty
* ---
* Dependencies:
@bryanmcnulty
bryanmcnulty / msdt_follina_exploit.py
Created December 5, 2022 07:59
MSDT Exploit (CVE-2022-30190)
#!/usr/bin/env python3
'''
* Written for a CTF :)
* ---
* Author: Bryan McNulty
* Contact: bryanmcnulty@protonmail.com
* GitHub: https://github.com/bryanmcnulty
* ---
* Dependencies: