SKA

About SKA allows you to implement a very simple and fast karma attack. You can sniff probe requests to choose the fake AP name or, if you want, you can insert the name of the AP manually evil twin attack. When target is connected to your WLAN you can active the HTTP redirection and perform a MITM...

CVE-2019-0193

CVE-2019-0193 Solr DataImport Handler RCE RCE-Vuln jdbc D:\CVE\CVE-2019-0193\solr-7.7.2\server\solr-webapp\webapp\WEB-INF\lib\mysql-connector-java-5.1.48.jar dataSource name="fromMysql" type="JdbcDataSource" driver="com.mysql.jdbc.Driver" url="jdbc:mysql://localhost:3306/mysql"...

test-task-CVE-2024-25600

test-task-CVE-2024-25600 Repository for internship test-task. Step 0: Clone this git repo git clone https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600 Step 1: Create docker containers Start Docker daemon sudo systemctl start docker.service Start Docker Containers To start the docker...

CVE-2023-24078

Description This script is a Proof of Concept PoC exploit I developed for CVE-2023-24078. After trying the publicly available PoCs that were not functional and facing frustration in trying to troubleshoot them, I just created my own script. Usage usage: python3 CVE-2023-24078.py -h -lh LHOST -lp...

CVE-2024-9474

CVE-2024-9474 PoC for Palo Alto PAN-OS vuln Requirements no any special requirements needed, only python3 and std library Usage python3 cve.py --help python3 cve.py -u URL Credits https://github.com/Chocapikk/CVE-2024-9474...

CVE-2019-9053-exploit

CVE-2019-9053-exploit working exploit for CVE-2019-9053 I edited oryginal exploit and now its working well. Oryginal exploit had some problems like missing syntax. Usage: Example usage no cracking password: exploit.py -u http://target-uri Example usage with cracking password: exploit.py -u...

CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE

RaspAP Hunter RaspAP Hunter is a Bash script designed to scan for RaspAP installations and test them for a specific vulnerability CVE-2022-39986. / \ / | / \ / // // // // \ / /| | / // / / , // // / / // // | / / // || ,//// ./// ||// // author: mind2hex / / / / / / / // // / / // \ / // \ / / /...

CVE-2018-8174_EXP

CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit for CVE-2018-8174 optional arguments: -h, --help show this help message and exit -u URL, --url URL exp url -o OUTPUT, --output OUTPUT Output exploit rtf -i IP, --ip IP ip for netcat -p PORT, --port PORT port for...

cve-2025-49844

CVE-2025-49844 My personal proof-of-concept for CVE-2025-49844, also known as RediShell. Supported target builds: x86-64 Linux redis:8.2.1-alpine Docker image x86-64 Linux redis:8.2.1-bookworm Docker image It's a bit clumsy, probably not as good as Wiz Research's. Still, I'm glad I managed to get...

CVE-2014-4109

This crash is difficult to reproduce. The included proof of concept makes it a little easier to trigger the crashing code path. My super scientific process of checking the crash was to click on the url with one hand and press enter with the other. It usually crashes within 15 attempts. "IE=9" als...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS Server RCE FOFA "HttpFileServer" Notes Affected range: HFS 2.3 and below Usage How To Use ulimit -n 999999; zmap -p PORT -B500M | go...

cve-2020-0688

cve-2020-0688 I made this script for conducting CVE-2020-0688 more rapidly. It helps to improve checking the vuln, reducing hugely steps for that. Modify these inputs before running the file. url = "https://mail.something.com" input 1 command = "cmd /c echo OOOPS!!! c:/truongtn.txt" input2...

CVE-2024-3400-Compromise-Checker

CVE-2024-3400 Compromise Checker A very simple bash script to check for evidence of compromise related to CVE-2024-3400 on Palo Alto Firewalls. Designed to provide a quick initial triage of potentially impacted devices by checking for the existence of artefacts outlined in the Volexity writeup an...

CVE-2026-58231

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2026-86218

CVE-2026-86218 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

PyUsernameMapScriptRCE

PyUsernameMapScriptRCE CVE-2007-2447 exploit written in python to get reverse shell...

FakeDataGen

FakeDataGen is a Full Valid Fake Data Generator. This tool helps you to create fake accounts in Spanish format with fully valid data. Within this information, you can find the most common names, emails, bank details and other useful information. Requirements Python 3 Install requirements.txt...

CVE-2020-13942

CVE-2020-13942 Apache Unomi pre-auth RCE CVE-2020-13942 exploit POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json Content-Length: 200...

CVE-2024-31666

Vulnerability Overview A vulnerability exists in Flusity-CMS v.2.33 that allows remote attackers to execute arbitrary code through a crafted script in the editaddonpost.php component. Affected Versions Flusity-CMS v.2.33 Vulnerability Details Attackers can exploit this vulnerability by sending a...