reportly

Reportly is an EntraID user activity report tool. About the tool This is a tool that will help blue teams during a cloud incident. When running the tool, the researcher will enter as input a suspicious user and a time frame and will receive a report detailing the following: 1. Information about t...

CVE-2026-89055

CVE-2026-89055 — Customer Reviews for WooCommerce CusRev Omisión de Autorización PoC en Python 3 para CVE-2026-89055 en Customer Reviews for WooCommerce customer-reviews-woocommerce / Ivole CusRev. Descripción PoCbit / GitHub CVE-2026-89055 — Customer Reviews for WooCommerce CusRev ≤ 5.120.0 es...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

cve-2023-42820

cve-2023-42820 JumpServer Affected Versions v2.24 - v3.6.4 Impact With knowledge of the email associated with the JumpServer admin user account default: admin/[email protected], it is possible to reset the admin password through this vulnerability, and by combining it with JumpServer's...

CVE-2026-66491

Lectura arbitraria de archivos mediante getSource en PhocaCommander PhocaCommander ≤ 6.1.3 — Path Traversal autenticado de administrador, sin CSRF requerido RESUMEN Existe una vulnerabilidad de lectura arbitraria de archivos en el endpoint del editor de archivos de PhocaCommander. La función...

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center RCE autenticado mediante WinREST/PowerShell invokeCommand. Uso: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Variables de entorno: root@kitploit: WACBASE - override target base URL default below WACPASS - password, use...

CVE-2019-19511

CVE-2019-19511 Chevereto - 1.0.0 Free - 1.1.4 Free, = 3.13.4 Core, Remote Code Execution Description installer.php in Chevereto through 1.1.4 Free, and through 3.13.4 Core, allows remote authenticated admins to execute arbitrary PHP code by injecting this code into the setup process and overwriti...

Make-and-Break

Make-and-Break Create and exploit a vulnerable Virtual Machine Description: Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux System Administration Interface PROOF of CONCEPT --- Linux OS Ubuntu 18.04.1 will be deploye...

CVE-2025-50286

Grav CMS v1.7.48 / Admin Plugin v1.10.48 - Authenticated RCE via Plugin Upload CVE-2025-50286 Grav CMS v1.7.48 with Admin Plugin v1.10.48 is vulnerable to Remote Code Execution RCE via the "Direct Install" plugin upload feature, allowing authenticated administrators to execute arbitrary PHP code ...

RedSun-

RedSun El repositorio de vulnerabilidades Red Sun Normalmente, simplemente soltaría el código del PoC y dejaría que la gente lo resolviera. Pero no puedo hacerlo con este, es demasiado divertido. Cuando Windows Defender se da cuenta de que un archivo malicioso tiene una etiqueta de nube, por la...

CVE-2024-27198

EN GenTeamCityExploit is a PoC tool that targets a vulnerability in the TeamCity server CVE-2024-27198. It enables the discovery of a TeamCity version and the creation of a new admin user by exploiting an authentication bypass flaw. Features Extracts the version of the TeamCity server. Checks for...

CVE-2024-57522

CVE-2024-57522 - Vulnerabilidad de XSS Almacenado en Users.php - SourceCodester Packers and Movers Management System 1.0 Descripción Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad de Cross-Site Scripting XSS Almacenado en el Packers and Movers Management System 1.0 d...

wsuks

wsuks Automatizando el ataque WSUS Obtener acceso administrativo local a una máquina Windows unida a un dominio suele ser el primer paso durante una prueba de penetración. En muchos casos, el Windows Server Update Service WSUS está configurado para implementar actualizaciones a los clientes a...

cloudmapper

CloudMapper 注意 ：网络可视化功能（命令 prepare）已不再维护。 CloudMapper 可帮助您分析您的亚马逊云服务（AWS）环境。最初目的是生成网络图并在浏览器中显示（该功能已不再维护）。现在它包含更多功能，包括安全问题的审计。 网络映射演示 报告演示 介绍文章 展示如何发现网络错误配置的文章 关于持续审计的文章 命令 audit：检查潜在的错误配置。 collect：收集有关账户的元数据。更多详情见此处。 findadmins：查看IAM策略以识别管理员用户和角色，或具有特定权限的主体。更多详情见此处。...

sshuttle

sshuttle：透明代理与VPN和SSH的交汇 据我所知，sshuttle是唯一能解决以下常见情况的程序： 你的客户端机器（或路由器）是Linux、FreeBSD、MacOS或Windows。 你可以通过SSH访问远程网络。 你不一定需要远程网络的管理员访问权限。 远程网络没有VPN，或者只有愚蠢/复杂的VPN协议（IPsec、PPTP等）。或者也许你 就是 管理员，只是对VPN工具糟糕的状态感到沮丧。 你不想为远程网络上的每个主机/端口创建一个SSH端口转发。 你讨厌openssh的端口转发，因为它有时很慢和/或愚蠢。...

CVE-2025-0282

PoC for CVE-2025-0282 Remote Unauthenticated Stack Buffer Overflow in Ivanti Products Overview This proof-of-concept demonstrates exploitation of CVE-2025-0282, a critical vulnerability affecting: Ivanti Connect Secure Ivanti Policy Secure Ivanti Neurons for ZTA gateways Based on watchTowr's...

DccwBypassUAC

DccwBypassUAC Este exploit abusa de la forma en que "WinSxS" es gestionado por "dccw.exe" mediante un método derivado del "Bypass UAC" de Leo Davidson para obtener un shell de administrador sin solicitar consentimiento. Es compatible con las arquitecturas "x86" y "x64". Además, ha sido probado co...

connectwise-screenconnect_auth-bypass-add-user-poc

CVE-2024-1708 y CVE-2024-1709 Una prueba de concepto desarrollada por @watchTowr para explotar una omisión de autenticación y añadir un nuevo usuario administrativo en ConnectWise ScreenConnect. Este es el primer paso en una cadena trivial de Ejecución Remota de Comandos. Sigue al equipo de...

CVE-2022-0169

CVE-2022-0169 — WordPress Photo Gallery SQLi PoC This is a simple Python proof-of-concept PoC for CVE-2022-0169 , an SQL injection vulnerability in the WordPress Photo Gallery plugin. What it does Checks the WordPress version if available Exploits the vulnerable admin-ajax.php endpoint Dumps...

CredNinja

This tool is intended for penetration testers who want to perform an engagement quickly and efficiently. While this tool can be used for more covert operations including some additions below, it really shines when used at the scale of a large network. At the core of it, you provide it a list of...