42835 matches found
vsftpd2.3.4PyExploit
vsftpd2.3.4PyExploit An exploit to get root in vsftpd 2.3.4 CVE-2011-2523 written in python Usage: ./exploit.py $VictimIPaddress Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume wha...
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell Introduction I went into a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend lab. I mimicked a real-world zero-day attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection key...
CVE-2026-81780-Hash-Form
CVE-2026-81780-Hash-Form CVE-2026-81780 — Hash Form RCE The Vulnerability Unauthenticated file upload in WordPress Hash Form plugin ≤ 1.4.2. The plugin allows arbitrary file uploads without proper authentication or file type validation, leading to Remote Code Execution RCE. Exploit Chain Step...
CyberhawksLab-telnetCVE
CyberHawks lab demo finding report Credit to: @SafeBreach-Labs CVE: CVE-2026-24061 Lab: Cyberhawks Lab Target: 10.1.1.1 demo.cyberhawks.lab Finding ID: WU-08 Date: 2026-09-08 Severity: Critical Status: Confirmed / Exploited Executive Summary During an assessment of the Cyberhawks lab environment,...
CVE-2026-116958
A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing...
jankybank
jankybank Inspired by and largely borrowed from kozmer/log4j-shell-poc Works with eurogig/log4sheller Use to create a CTF based on Log4j...
Exploit for CVE-2026-104623
CVE-2026-104623 — Rancher Manager local-cluster-shell authoriz...
RCE-in-Spring-Cloud-CVE-2022-22963
Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: $ nc -lvnp 9001 Run the exploit example with default port 9001 on attacker host: $...
xll_windows_reverse_shell
xllwindowsreverseshell xll windows reverse shell In your Attacker Kali machine: git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. Update the revsh.ps1 2. create python http server python3 -m http.server 9999 In your Attacker Windows machine: 1. Move notpadXLL.c to your windows...
SharpMemshell
SharpMemshell A .Net memory shell implemented in different ways. The current version is suitable for Godzilla-4.01. HttpListener VirtualPath...
ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend
ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Yo, in this LetsDefend lab I dove into a SharePoint zero-day called ToolShell CVE-2025-53770. Basically, I mimicked a real-world attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection keys,...
CVE-2019-11447_reverse_shell_upload
CVE-2019-11447 CuteNews 2.1.2 Reverse Shell Upload A slightly modified version of the Mt-Code POC which spawns a full reverse shell rather than a web shell. This exploit uses the famous PentestMonkey PHP Reverse Shell. Install pip install -r requirements.txt Example use: Create a user on the...
dlink_shell_poc
dlinkshellpoc Dlink shell PoC Tested on D-Link 815 Version A 1.3 Works with: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Note: PoC Code doe not handle captas. Example root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link...
CVE-2026-104623
A security vulnerability exists in the authorization handling for the local management cluster shell feature of SUSE Rancher Manager 2.15.0 up to 2.15.3, 2.14.0 up to 2.14.7, 2.13.0 up to 2.13.11, 2.12.0 up to 2.12.15, 2.11.0 up to 2.11.19 and possible older versions. The authorization check that...
InsomniaShell
InsomniaShell 🖥️ -h3x0v3rl0rd- Usage :...
CVE-2021-4034
CVE-2021-4034 A day for the polkit privilege escalation exploit Simply run and enjoy ./blasty for your root shell. The original advisory from the real authors is - here Installation If the exploit works, you will get a root shell immediately: user@tecnokarita-/Descargas $ git clone...
CVE-2024-25600-mass
mass upload shell for cve python3 exploit.py -l yourlist.txt path shell https://examplewebsite.com/asd.php...
Heartexploit
Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....