CVE-2021-44910_SpringBlade

CVE-2021-44910-SpringBlade Vulnerability Detection Tool SpringBlade JWT authentication vulnerability. Usage python3 Tested with HS256, HS384, and HS512 algorithms respectively...

CVE-2025-24054_CVE-2025-24071-PoC

CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...

ShatteredFTP

ShatteredFTP Dual exploiter Overview This exploit script targets vulnerabilities in CrushFTP’s user creation/authentication process, offering dual mode support: CVE-2025-2825 Exploits a flaw in XML payload handling during user creation. Use this when your target’s web interface responds per the...

imposter

IMPOSTER A pentest tool used to attack windows clients on rogue networks. Current version Features Downgrade LDAP to NTLM authentication Fake initial steps of an domain controller to fool Network Location Awareness Servers DNS, CLDAP, LDAP Setup The current version have been tested on Kali Linux...

CVE-2026-106043

Ivanti Xtraction versions before 2026.4 are affected by a Missing Authentication for Critical Function vulnerability (CWE-306). This flaw allows a remote unauthenticated attacker to create or modify trusted sites . While the documents do not provide specific remediation steps or exploit links, th...

CVE-2025-60188-Atarim-Plugin-Exploit

CVE-2025-60188-Atarim-Plugin-Exploit CVE-2025-60188: Atarim Plugin Authentication Bypass via HMAC Forgery Overview This repository contains a Proof of Concept PoC and technical analysis for CVE-2025-60188, a critical vulnerability discovered in the Atarim WordPress plugin. This flaw allows...

CVE-2023-51764

PoC for CVE-2023-51764 SMTP SMUGGLING Postfix CVE-2023-5176525.py Description This script allows sending messages using port 25 of the mail server. Usage Before running, modify the variables: smtpserver - address of the mail server fromaddress - sender of the first email toaddress - recipient of...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. use - python3 dahuaexploit.py...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2018-6789

CVE-2018-6789 Environment Setup Install dependencies apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev Download an old version of exim wget ftp://mirror.easyname.at/exim-ftp/exim/exim4/old/exim-4.89.tar.gz tar -xvzf ./exim-4.89.tar.gz c...

CVE-2023-25136_POC

CVE-2023-25136 POC POC For A Pre Auth Double Free Vulnerability Affecting OpenSSH 9.1 To 9.2 Neccessary libraries Please make sure you have the following dependencies installed: Python 3 duh termcolor argparse fabric You can also install these libraries directly from the included requirements.txt...

accfly

How secure is your "security" camera? Executive summary In the beginning of 2020, at my former workplace, I had a chance to take part in an internal pwn2own style event. There were several targets available, but I was interested the most in Accfly Wireless Security camera. Unfortunately I had not...

CVE-2026-35330

CVE-2026-35330 strongSwan EAP-SIM / EAP-AKA attribute parser pre-auth heap buffer overflow via integer underflow. Description parseattributes in src/libsimaka/simakamessage.c:419 reads TLV headers whose length byte counts 4-byte words. For the ATRAND / ATENCRDATA branch: if hdr-length 4 in.len ||...

poc-cve-2025-55182

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...

CVE-2020-13933

CVE-2020-13933 Lab Shiro 1.6.0 Authentication Bypass Vulnerability PoC http://127.0.0.1:8080/res/%3bpoc Lab Environment Code Description ShiroConfig.java: Permission configuration: when requesting /res/ resources, it returns a 302 redirect to the login page for authentication. NameController.java...

CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN Peering Authentication Bypass CVE-2026-20182 — Cisco Catalyst SD-WAN Peering Authentication Bypass Assessment tool for authorized testing of Cisco Catalyst SD-WAN Controller / Manager peering authentication bypass CVE-2026-20182. | ---|--- CVE| CVE-2026-20182...

CVE-2022-1040

CVE-2022-1040 : Sophos XG115w Firewall 17.0.10 MR-10 - Authentication Bypass This vulnerability allows an attacker to gain unauthorized access to the firewall management space by bypassing authentication ☕️ Live : ....... updated...

CVE-2022-3602-and-CVE-2022-3786

CVE-2022-3602-and-CVE-2022-3786 This is a detection script which will determine whether client authentication is required by the SSL server, in which case servers based on OpenSSL 3.0.0 to 3.0.6 will be vulnerable to both CVE-2022-3602 and CVE-2022-3786 Prerequisite's python3 pip install -r...

CVE-2024-48705

Overview During recent security research for the Wavlink AC1200 Model: WL-WN532A3 a Post-Authentication Command Injection Vulnerability was identified in the "/cgi-bin/adm.cgi" endpoint. This vulnerability could enable malicious actors who have compromise the credentials for the router, to run...

cve-2024-0012-gui-poc

CVE-2024-0012 and CVE-2024-9474 Authentication Bypass in the Management Web Interface PAN-SA-2024-0015 and Authenticated Command Injection in Palo Alto PAN-OS. See the blog post for technical details. Exploit authors Original exploit written by Sonny of watchTowr @watchtowrcyber. Code and GUI...