Tomcat-CVE-2017-12615

Tomcat Arbitrary Write-file Vulnerability through PUT Method CVE-2017-12615 中文版本Chinese version Tomcat version: 8.5.19 Environment Setup docker-compose build docker-compose up -d After successfully running the commands above, you will see the example page of Tomcat through visiting the site...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . This has produced the best results during testing. Newlines in the payload are replaced with spaces before upload. ================== Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...

CVE-2024-51567

CVE-2024-51567 Exploit Script CVE-2024-51567 is a Python proof-of-concept PoC exploit script for CVE-2024-51567 , a critical command injection vulnerability affecting CyberPanel v2.3.6. This vulnerability, found in the upgrademysqlstatus endpoint, enables remote command execution RCE by bypassing...

dll-injector

About As the name suggests, the application primarily performs injecting a DLL into any process running on Windows. With the power of this, it is able to perform several operations on a process such as loading a DLL, unloading a DLL, and hooking primary WinAPI functions e.g., CreateFileW, ReadFil...

OpenCRE

OpenCRE Go to https://www.opencre.org to see OpenCRE working and more explanation. OpenCRE stands for Open Common Requirement enumeration. It is an interactive content linking platform for uniting security standards and guidelines. It offers easy and robust access to relevant information when...

TeamsPhisher

... :-++++++=-. .=+++++++++++- .++++++++++++++= :------: :-:--. :+++++++++++++++. .---------- = .-+. :+++++++++++++++. -----------: := :. :--------------------------=++++++++- .------------ .=+ ++ ----------------------------++++++-. :+=-----===: -+-.+: :---------------------------++++=-...

CVE-2024-2961-Remote-File-Read

CVE-2024-2961 Remote File Read This script demonstrates how to exploit a vulnerability in systems using the iconv library when it mishandles character encoding conversions, as described in CVE-2024-2961. It allows an attacker to read arbitrary files from the server by taking advantage of PHP filt...

SharpWeb

SharpWeb Introduction SharpWeb is a .NET 2.0 CLR compliant project that can retrieve saved logins from Google Chrome, Firefox, Internet Explorer and Microsoft Edge. In the future, this project will be expanded upon to retrieve Cookies and History items from these browsers. Usage Usage:...

smack

SMACK is both a modular software verification toolchain and a self-contained software verifier. It can be used to verify the assertions in its input programs. In its default mode, assertions are verified up to a given bound on loop iterations and recursion depth; it contains experimental support...

minder

| | | | | Installation | Documentation | Releases What is Minder? Minder is an open source platform that helps development teams and open source communities build more secure software, and prove to others that what they’ve built is secure. Minder helps project owners proactively manage their...

CVE-2023-27587-PoC

CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What is ReadToMyShoe? ReadtoMyShoe RTMS is a web application rust, yew and axum that lets you upload articles via URL or via directly pasting and listen to them later. Impact If an error occurs when adding an article, the website shows the user ...

CVE-2022-0952

CVE-2022-0952 Sitemap by click5 1.0.36 - Unauthenticated Arbitrary Options Update Description The plugin does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated...

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

CVE-2023-4220-Proof-of-concept

CVE-2023-4220-Proof-of-concept Chamilo LMS Unauthenticated Big Upload File that allows remote code execution CODE IS MADE AND USED FOR HACKTHEBOX CTF PERMX Unauthenticated file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS the php...

Android-Disassembler

Android-Disassembler !ci12 CodeFactor Analyze malicious app on your phone Maintenance status Maintenance has resumed, but the project is still in a recovery and modernization phase. The baseline now expects initialized git submodules before building. Default open/import/export flows now use...

CVE-2023-46442_POC

CVE-2023-46442POC Environment: Java 8 POC for CVE-2023-46442, Denial of Service vulnerability found within Soot before 4.4.1 under Java 8 When retrieving the body of a maliciously crafted method, a very small size class file or method can cause huge resource consumption and loop forever until a...

CVE-2020-1967

CVE-2020-1967 Proof of concept exploit about OpenSSL signaturealgorithmscert DoS flaw CVE-2020-1967. Credit for the original finding to Bernd Edlinger, additional analysis by Matt Caswell and Benjamin Kaduk, this demo by Imre Rad. Prerequisite Server or client applications that call the...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

Gepetto

Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro ≥ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...

sdrtrunk

MacOS Tahoe 26.1 Users - Attention: Changes to USB support in Tahoe version 26.x cause sdrtrunk to fail to launch. Do the following to install the latest libusb and create a symbolic link and then use the nightly build which includes an updated usb4java native library for Tahoe with ARM processor...