142984 matches found
CVE-2024-23997
YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...
CVE-2024-10511
CVE-2024-10511 CWE-287: Improper Authentication Summary Schneider Electric PowerChute Serial Shutdown product is a UPS management software enabling graceful system shutdown and energy management capabilities for desktop, servers and workstations PowerChute Serial Shutdown v1.2.0.301 and prior...
CVE-2015-1635
️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...
POC-CVE-2023-32681
POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...
CVE-2023-25690_lab
HTTP Request Smuggling via Apache proxy Environment Setup Infrastructure Component| Role| Version ---|---|--- Apache HTTP Server| Reverse Proxy| 2.4.55 vulnerable Spring Boot embedded Tomcat| Backend API| 4.x Java 21 SQLite| Database| — User ──► Apache :80 Proxy ──► Spring Boot :8080 Backend ──►...
fingerprintx
Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...
apache2.4.49VulnerableLabSetup
apache2.4.49VulnerableLabSetup CVE-2021-41773, Apache HTTP Server 2.4.49 is vulnerable to Path Traversal and Remote Code execution attacks. This repo is to simulate the vulnerability...
CVE-2021-26084
usage: python poc.py http://host:port/...
provisioner
Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...
burp-cc-bridge
CC-Bridge A Burp Suite Montoya API extension that exposes Burp's most useful primitives over a localhost HTTP API so an agentic coding shell Claude Code, OpenAI Codex, etc. can drive Burp from curl. Works on Burp Community. Download Grab the latest release JAR — no clone or build required:...
CVE-2024-24549
Here’s a README.md for a Proof of Concept PoC demonstrating the Denial of Service DoS vulnerability in Apache Tomcat due to improper input validation of HTTP/2 requests: Proof of Concept PoC for Denial of Service DoS Vulnerability in Apache Tomcat This repository contains a Proof of Concept PoC...
CVE-2024-24549
Apache Tomcat DoS Exploit CVE-2024-24549 Description This repository contains a proof-of-concept PoC exploit for a denial-of-service DoS attack against Apache Tomcat version 9.0.83 , based on an issue identified in the handling of HTTP headers and payloads. This script generates malicious HTTP...
cve-2020-14882
cve-2020-14882 usage: cve-2020-14882.py http://127.0.0.1...
CVE-2006-20001
CVE-2006-20001 A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. authentication| complexity|...
Crimson-Cloak-ISH-wrapper-iOS-
Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...
CVE-2022-1388
CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...
cve-2023-44487-demo
⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack This project demonstrates the HTTP/2 "Rapid Reset" vulnerability CVE-2023-44487 that allows attackers to overwhelm servers using RSTSTREAM frames, causing denial-of-service DoS. It includes: ✅ Exploit test using Golang-based tool ✅ Vulnerable Apac...
CVE-2026-42945-NGINX-Rift-Toolkit
CVE-2026-42945 Nginx Rift Vulnerability Toolkit Comprehensive toolkit for scanning, patching, and testing CVE-2026-42945 - a critical RCE vulnerability in nginx Table of Contents Overview CVE Details Features Toolkit Components Requirements Installation Usage Workflow Examples Security...
API-SPY-API-PROBE
API-SPY 🕵️👻 A powerful directory brute-force tool designed for API reconnaissance and penetration testing. Automatically discovers hidden API endpoints, performs recursive subscanning, and probes HTTP methods for deeper API enumeration. Features ✨ Core Capabilities: 🎯 Fast endpoint discovery using...