Exploit-Framework - A Exploit Framework for Websites

Exploit-Framework - A Exploit Framework for Website Vulnerabilities

Install and Run
   git clone https://github.com/WangYihang/Exploit-Framework
   cd Exploit-Framwork
   sudo python framework.py

Exploits
Vendor	    Vulnerability	   Effected Version	   Description	                        Author
zblog	    NOT_CVE	<=1.5.1	        Zblog          Authenticated LFI	                @Shutdown_r
OpenSNS	    NOT_CVE	<=3.31	        OpenSNS        UnAuthenticated GetShell         	@90sec
Joomla	    CVE-2015-8562	        1.5<3.45	   Joomla Header Unauthenticated RCE	@Andrew McNicol
Codiad	    CVE-2017-11366	        <=2.8.3	       Codiad Authenticated RCE	            @WangYihang
Codiad	    CVE-2014-9581	        <=2.4.3	       Codiad Authenticated LFI	            @TaurusOmar
SeaCMS	    CVE-2017-17561	        <=6.56	       SeaCMS Authenticated GetShell	    @WangYihang
SeaCMS	    NOT_CVE	<=6.28	        SeaCMS         UnAuthenticated RCE	                @没穿底裤
phpMoAdmin	CVE-2015-2208	        <=1.1.2	       phpMoAdmin UnAuthenticated RCE	    Unknown
WordPress	CVE-2017-5487	        <4.7.1	       WordPress Username Enumeration	    @Dctor
DedeCMS	    NOT_CVE	<=5.6	        DedeCms        recommend.php SQL injection	        @没穿底裤
Kernel	    CVE-2016-5195	        2.6.22<3.9	   DirtyC0w Privilege Escalation	    @nowsecure

Video example: https://asciinema.org/a/152418

Help menu
gravityfalls@gravityfalls:~/Exploit-Framework$ sudo python framework.py
===================================================
|            Exploit Framework (v0.0.1)           |
| https://github.com/wangyihang/exploit-framework |
===================================================
[Framework]=> help
Core Commands
=============
	Command	Description
	-------	-----------
	help	show help
	version	show version
	use	Selects a module by name
	show	Displays modules of a given type, or all modules
	search	Searches module names and descriptions
	back	Move back from the current context
	quit	quit

Module Commands
=============
	Command	Description
	-------	-----------
	options	Displays global options or for one or more modules
	info	Displays information about one or more modules

WIKI: https://github.com/WangYihang/Exploit-Framework/wiki

Contribution: Guidance of writing exploit module

Download Exploit-Framework: https://github.com/WangYihang/Exploit-Framework