CVE-2018-17553

CVE-2018-17553 CVE-2018-17553 PoC Navigate CMS version 2.8 and prior This proof of concept was put together when working on the Black Pearl box from TCM. I couldn't find anyone that put out a PoC other than just using Metasploit. As I'm avoiding Metasploit in my hacking journey to then go back an...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey To see how to Make Spoofed Key and Signing the code REQ: openssl, main.rbwhich i uplaoded VISIT : https://twitter.com/exploitblizzard...

Struts2-045-Exp

Struts2-045-Exp Struts2-045 exploitation script For testing purposes only usage:python3 struts2-045-exp.py url cmd...

CVE-2023-34598

CVE-2023-34598 - Gibbon v25.0.0 LFI Exploit This repository contains a Python script that helps identify and exploit a local file inclusion LFI vulnerability CVE-2023-34598 in Gibbon v25.0.0. The script can scan a target website for potential vulnerability and, if successful, download the SQL dum...

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerability is RCE vulnerability in outdated eval-stdin.php. This exploit is just automation for mentioned vulnerability and is still in development. Scripted in Ruby 3.0.4 within 2 hours, tested on Kali linux, Arch Linux, Ubuntu minimal and Termux. How to...

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Proof-of-concept Python script targeting CVE-2023-43208 in Mirth Connect. Disclaimer Use only in environments you own or are explicitly authorized to test. This repository is for security research, validation, and defensive testing. The author assumes no...

log4shell-scanner

log4shell-scanner A dependency-free, defensive scanner for Log4Shell — finds vulnerable log4j-core jars and JNDI exploit patterns in logs and config. Why this project During my CERT-In rotation I worked on threat identification, containment, remediation and threat hunting — exactly the workflow...

Chrome-Extractor

Chrome-Extractor Python script that will extract all saved passwords from your google chrome database and save it in chrome.txt Note: Windows only...

CVE-2021-41773

CVE-2021-41773 A simple bash POC script for Path Traversal & RCE vulnerability in Apache 2.4.49 Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ ./exploit.sh Disclamer This tool is for educational purposes only. I hold no responsibility for any misuse...

CVE-2020-14882-WebLogic-Analysis

Vulnerability Research: Exploitation of the CVE-2020-14882 and CVE-2020-14883 Chain in Oracle WebLogic Server The repository contains a technical report Write-up and a conceptual Proof of Concept PoC demonstrating the chained Authentication Bypass and Remote Code Execution RCE vulnerabilities in...

CVE-2025-1974_IngressNightmare_PoC

CVE-2025-1974IngressNightmare poc IngressNightmare Script A Python script to automate sending JSON payloads to a list of IPs via curl, capturing responses and splitting them into success and failure XML reports. Features Sends HTTPS POST requests with a JSON payload to multiple IP addresses...

CVE_ADC_IOC_2026

CVEADCIOC2026 NetScaler CVE Preconditions Checker Author: Derek A Python script to inspect NetScaler configuration files ns.conf and determine if an appliance meets the preconditions for specific CVEs. The script parses running configuration or saved config files and reports vulnerable...

CVE-2021-22911

CVE-2021-22911 Modifed ver of the original exploit to save some times on password reseting for unprivileged user The script assumes that you can register the account or already know credentials of unprivileged users. Change the password to the valid password on line: 63,73,96. Original exploit:...

text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

CVE-2022-30190-NSIS

MSDT Patcher, a.k.a. CVE-2022-30190-NSIS This is an NSIS script that helps deploy and roll back the mitigation registry patch for CVE-2022-30190 as recommended by Microsoft. Download the executable here. How does it work? When run, it checks for the presence of the key HKCR\ms-msdt. If the key...

CVE-2024-22890

CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-22890/blob/main/CVE-2024-22890.md...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

CVE-2023-46747

CVE-2023-46747 An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs This is an script indented forto exploit the Remote code Execution on Vulnerable f5-BIG Ip products Installation: git clone...

checker-CVE-2024-6387

OpenSSH Vulnerability Checker Overview This script scans a list of target IP addresses or ranges to determine if they are running vulnerable To CVE-2024-6387. Features Scans IP addresses, domain names, file paths containing IP addresses, or CIDR network ranges. Checks a specified port default: 22...

CVE-2023-49539

CVE-2023-49539 Book Store Management System v1.0 - Cross-site scripting XSS vulnerability in "index.php/category" - vulnerable field: "Category Name" Description : Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in "/bsmsci/index.php/category"...