watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

CVE-2025-34028 A Commvault Pre-Authenticated Remote Code Execution Proof of Concept See our blog post for technical details Detection in Action python watchtowr-vs-commvault-rce-CVE-2025-34028.py --url https://192.168.1.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / |...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...

ClearML-CVE-2024-24590

/ | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle Artifact Upload PoC This project demonstrates how to dynamically upload a pickle artifact to ClearML...

OffensivePascal-CVE-2010-2075

CVE-2010-2075 FreePascal implementation of CVE-2010-2075 Vulnerability UnrealIRCd 3.2.8.1 RCE by sending "AB; command" to any listening service. Any command you send is executed by the same user as UnrealIRCD runs as. This implementation launches a reverse shell to your listener. Step 1 Start a...

macos-collector

macos-collector macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR macos-collector.sh is a Shell script utilized to collect macOS Forensic Artifacts from a compromised macOS endpoint using primarily Aftermath by Jamf Threat Labs. Download Download the latest version of...

IPSpinner

🔁 IPSpinner IPSpinner is a local proxy which can be used to redirect all incoming requests through different chosen providers. The purpose is to create a pass-through proxy that rotates the source IP address of each request. As an example, running a bruteforce operation through IPSpinner will hel...

CVE-2022-3552

CVE-2022-3552 In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling=4.22.1.5" and you will have to have valid admin credentials. If you have the situation above, here are the steps you have to take in order to get the juicy RCE: Create a python virtual...

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Spring Cloud Function Vulnerability CVE-2022-22963 RCE This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function =3.1.6 for 3.1.x and =3.2.2 for 3.2.x Combination of multiple POCs online Author: Randall Banner Date: 17/04/23 Description: Scri...

cisco-CVE-2023-20009

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - RCE from config file CVE: CVE-2023-20009 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Cisco Cisco...

CVE-2017-9757

Exploit for syncbreeze Shellcode to obtain a shell from Syncbreeze v10.0.28...

CVE-2019-18634

CVE-2019-18634 working python exploit on Ubuntu 20.04, sudo version 1.8.25 replace "./shell.sh" with your reverse shell writeup at https://y3a.github.io/2021/04/17/sudo-cve-analysis/...

XeytanWin32-RAT

WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...

CVE-2019-9978

CVE-2019-9978 – Proof of Concept PoC Functional PoC for vulnerability CVE-2019-9978 , affecting the plugin Social Warfare = 3.5.2, allowing Remote Code Execution RCE in WordPress. 📌 Description This exploit abuses the swpdebug=loadoptions parameter to force the loading of a remote payload, allowi...

CVE-2025-49844-RediShell-AI-made-Revshell

CVE-2025-49844 RediShell AI-made Revshell PoC Untested completition of the Redishell PoC made by AI. Original PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Korean Piece: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Progress ? We later went...

CVE-2025-6019

CVE-2025-6019: libblockdev Local Privilege Escalation Vulnerability Summary CVE-2025-6019 is a local privilege escalation LPE vulnerability discovered in the libblockdev library, which interacts with the udisks2 daemon and Polkit. Vulnerability Description A local attacker with allowactive Polkit...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2017-7494

CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...

relayer

Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...

vsftpd-234-backdoor

vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over FTP and drops you into an interactive root shell on the spawned listener. Written as a modern replacement for old exploit scripts which depended on...

SMShell

SMShell PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 bu...