cobaltstrike_swing_xss2rce

This repository does not have a README...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Source code based on: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Install Python 3.8 + pip install requests Windows 10 OS, Linux Ubuntu Used python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80 --check...

apache-httpd-path-traversal-checker

Apache HTTPD Path Traversal Checker 0x00 Overview On October 5, 2021, the directory traversal vulnerability CVE-2021-41773 in Apache HTTPD 2.4.49 was disclosed online, which could lead to arbitrary file reading if the traversed directory is accessible, such as when configured with Require all...

CVE-2024-12877-Exploit

GO-TO CVE – CVE-2024-12877-Exploit Week 66 | Author: Ali Soltani soltanali0 Welcome to Week 66 of the GO-TO CVE series , where we dissect vulnerabilities, analyze root causes, and demonstrate practical exploitation techniques in a safe, educational context. 🚨 Overview CVE-2024-12877 is a PHP Obje...

ElasticSearch-CVE-2014-3120

ElasticSearch search Remote Code Execution CVE-2014-3120 POC Code to exploit CVE-2014-3120 Requirements: python Usage: python elasticcheck.py Example: ➜ $ python elasticcheck.py hostport.txt 0 10.0.0.10:9200 Vulnerable 1 10.0.0.11:9201 Not Vulnerable 2 10.0.0.12:9201 Connection error Vulnerable...

CVE-2022-41924

CVE-2022-41924 POC 👉 https://oalieno.tw/posts/tailscale-rce...

CVE-2025-25257

CVE-2025-25257 FortiWeb CVE-2025-25257 exploit https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce exp.py: working/full exploit. signed.py: just a PoC of file read/write. initial version of the exploit...

CVE-2024-8353

This post is a research article published by EQSTLab. Thanks tocuokon, who discovered this vulnerability. Introduction Further Analysis CVE-2024-5932 EQST Insight R&TPDF file. https://github.com/user-attachments/assets/085c2f81-2894-4bb7-a3f5-62406dcb1021 CVE-2024-8353 ★ CVE-2024-8353 Arbitrary...

CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

Zimbra-RCE

Zimbra-RCE Zimbra RCE CVE-2019-9670 $ ./zimbra.py -h . . \ /|| \ | \ \ \ / / / | |/ | \ \ \ | / \ / | / / | | Y Y \ \ \ | // \ | | \ | \ / |||| / /| / || /\ / / / / / / / / / usage: zimbra.py -h -u URL -d DTD -n PAYLOADNAME -f PAYLOADFILE Zimbra RCE CVE-2019-9670 optional arguments:...

cve-2020-0688-webshell-upload-technique

Exchange Remote Code Execution cve-2020-0688 - RED TEAM MODE ON require: python3+ UNIVERSAL Python implementation for cve-2020-0688, utilizing ASPX webshell for custom command output This just a POC to facilitate vulnerability demostrations for security reasons. I disapprove every illegal actions...

cve-2020-14882

CVE-2020-14882 Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 POC: http://IP:7001/console/images/%252E%252E%252Fconsole.portal?nfpb=false&pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession"java.lang.Runtime.getRuntime.exec'calc.exe';"; image: EXP: python...

CVE-2021-22205

CVE-2021-22205 Description - POC for CVE-2021-22205: Gitlab CE/EE RCE 未授权远程代码执行漏洞 POC && EXP - create by antx at 2021-10-29. Detail - An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file...

CVE-2018-14324-Exploit

Hacking Eclipse GlassFish - CVE-2018-14324 The description of CVE-2018-14324 does not fully explain the impact of this vulnerability. TLDR you have access to Java Management Extensions JMX via hardcoded admin:admin creds. While impact is listed as " potentially sensitive information, perform...

fastjson-1.2.58-rce

fastjson-1.2.58-rce need: fastjson autoType is enabled h2 database and some jar . ├── fastjson-1.2.58.jar ├── h2-1.4.199.jar ├── jackson-annotations-2.9.8.jar ├── jackson-core-2.9.8.jar ├── jackson-databind-2.9.8.jar └── logback-core-1.3.0-alpha4.jar Download fastjson-1.2.58.jar...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

CVE-2024-36401

RCE for CVE-2024-36401 POC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets. Overview POC for CVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer. This POC is based on the security advisory by phith0n. H...

CVE-2019-0708-poc

CVE-2019-0708-poc CVE-2019-0708 Remote Code Execution Vulnerability Batch Detection 3389hosts is a list of IP addresses to be detected, one per line pool = ThreadPool10 is a custom scanning thread count Note Windows python3 environment Usage 1. Edit 3389hosts, write the IP addresses to be detecte...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: docker run --name...