CVE-2024-6387

CVE-2024-6387 This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH.This script is a faster and simpler version of an OpenSSH vulnerability scanner. The tool leverages multi-threading to optimize scanning...

CVE-2015-4495

CVE-2015-4495 Exploit for CVE-2015-4495 / mfsa2015-78 How to use Add your logic in the parsedirectorylisting function. Usage $ git clone https://github.com/vincd/CVE-2015-4495.git $ cd CVE-2015-4495 $ python -m SimpleHTTPServer Then open an unpatch Firefox version 39.0.3. A popup should spawn wit...

tcpflow

TCPFLOW 1.5.0 ダウンロードディレクトリ: http://digitalcorpora.org/downloads/tcpflow/ インストール ほとんどの一般的なGNU/Linuxディストリビューションは、リポジトリにtcpflowを同梱しています。そのため、Debian/Ubuntuなどでは以下のように入力します。 sudo apt-get install tcpflow Fedora/RedHat/CentOSなどでは以下のように入力します。 sudo dnf install tcpflow これで完了です。何らかの理由でこれで十分でない場合は、ソースからビルドできま...

CVE-2020-13925

CVE-2020-13925 Environment Setup Refer to https://github.com/apache/kylin to deploy using Docker, and change the version to 3.0.1 the vulnerable version. You can remove -m 8G \ it controls the allocated memory size. Then visit http://host:7070/kylin/login. The default username and password are...

CVE-2018-18912

🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2 demonstrating how an authenticated HTTP POST parameter can corrupt the exception handler chain. 📑 Table of Contents Why this repository exists Why thi...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2 Working exploit for Open Web Analytics 1.7.3 - RCE enhenced with pentestmonkey's php reverse shell, Fixed issue of not able to find user in cache. Original soruce exploit can be found on here Usage Add your attacker...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-30998 Description: Vulnerable to SQL Injection via 'email' parameter. Affected...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 のPOCを開発しました。RCE + cgi-bin パストラバーサルです。 注 : Apache2 2.4.49 でテスト済み 脆弱性のある Apache2 2.4.49 を Docker から直接プルできます $ sudo docker pull blueteamsteve/cve-2021-41773:no-cgid $ sudo docker run -dit -p 80:80 blueteamsteve/cve-2021-41773:no-cgid http://localhost:80 パストラバーサル RCE 要件...

barrido

barrido Console utility to find web application paths. Still in alpha version. Examples Multiple URLs bruteforcing: $ cat urls.txt https://target.a.com https://target.b.com https://target.c.com $ barrido urls.txt wordlists/quickhits.txt -se | tee curiouspaths.txt https://target.c.com/manager/ 401...

CVE-2023-30212-LAB

Creating a Vulnerable Docker Environment CVE-2023-30212 Description CVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site Scripting XSS attacks OURPHP Steps let’s download Dockerfile Open Terminal in the...

CVE-2021-37580

CVE-2021-37580 POC for CVE-2021-37580 0x00 Vulnerability Principle Vulnerability principle: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Single URL Usage: python3 CVE-2021-37580.py -u url -n username.txt For shenyu-admin-2.4.0, vulnerable versions see below: For...

CVE-2023-38831

CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.win-rar.com/...

cobaltstrike4.5_cdf-1

cobaltstrike4.5cdf Crack cobaltstrike4.5, remove checksum8 feature, bypass BeaconEye, fix stage leakage via wrong path, add TOTP two-factor authentication, add encrypted username display, fix foreign spawn bug in 4.5, rename client configuration file, etc. cobalt strike4.5 crack cobaltstrike4.5...

NcStatusCheck

NcStatusCheck Centralized monitoring for multiple Nextcloud instances NcStatusCheck is a monitoring tool that lets you track the health of multiple Nextcloud servers from a single web interface: Nextcloud and PHP versions against their security floor, branch end of life, reachability, configurati...

CVE-2025-58443

CVE-2025-58443 exploit POC for https://github.com/FOGProject/fogproject which is authentication bypass leads to dump DB that include full DB dump, that include clear text password and users and admin password hash. vulnerable version : 1.5.10.1673 below a script that will exploit the vulnerabilit...

comission

CoMisSion - WhiteBox CMS analysis CoMisSion is a tool to quickly analyze a CMS setup. The tool: checks for the core version; checks for modifications made on the core additions, alterations, deletions with a fresh archive downloaded from CMS official website; looks for the last core version; look...

CVE-2024-23897

PoC to exploit the CVE-2024-23897 vulnerability in Jenkins versions 2.441 or earlier, through which we can read internal system files. First, we check the Jenkins version to ensure it is vulnerable: Next, we can use the exploit: python3 CVE-2024-23897.py 172.17.0.2 8080 /etc/passwd To practice...

linux-4.19.72_CVE-2020-27815

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2021-42663

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 2.3.0. Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 2.3.0. An attacker can leverage this vulnerability...

CVE-2025-1661

CVE-2025-1661 Exploit for CVE-2025-1661 - HUSKY – Products Filter Professional for WooCommerce 1.3.6.6 PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...