CVE-2021-4191_Exploits

CVE-2021-4191Exploits pip install python-graphql-client Usage: python3 gitlabenum.py --rurl http://10.0.0.6/api/graphql Copyrights: https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/...

Joomla-v4.2.8---CVE-2023-23752

Joomla! v4.2.8 - Unauthenticated Information Disclosure Exploit Script This Bash script exploits an unauthenticated information disclosure vulnerability in Joomla! versions 4.0.0 to 4.2.8. sudo apt-get update sudo apt-get install jq ./exploit.sh http://example.com...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG es una herramienta basada en la salida de la utilidad systeminfo de Windows que proporciona la lista de vulnerabilidades a las que el sistema operativo es vulnerable, incluyendo cualquier exploit para estas vulnerabilidades. Se admite...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

This repository does not have a README...

Windows-exploitation-Apache-Tomcat-8.5.19-CVE-2019-0232-

This repository does not have a README...

CVE-2010-3490

CVE-2010-3490 FreePBX exploit = 2.8.0...

flash-exploit-defense-system

flash-exploit-defense-system Comprehensive multi-layer defense system against Adobe Flash CVE exploits CVE-2012-0754, CVE-2015-xxxx, CVE-2016-xxxx, CVE-2018-xxxx with browser, mobile, server, and system-level protection...

CVE-2018-2628

CVE-2018-2628 use: exploit.py 192.168.1.1:7001 exploit.py url.txt 格式： 192.168.31.1:7001 192.168.31.100:7001...

exploits-forsale-collateral-damage

collatpayload heres the code solsticeartifacts feat:Added solstice payload server and network-loading Gamescript .gitignore add gitignore LICENSE Initial commit README.md feat:Added solstice payload server and network-loading Gamescript collatpayload.sln heres the code ntdll.def heres the code...

Follina-Vulnerability-CVE-2022-30190-Exploit-Analysis

Follina-Vulnerability-CVE-2022-30190-Exploit-Analysis Exploration of the Follina CVE-2022-30190 Microsoft Office vulnerability, including a detailed analysis, proof-of-concept exploitation in a controlled lab, and mitigation strategies. For educational and research purposes only...

CVE-2007-2447

CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : netcat -lnvp Table of contents Exemples Requirements Payloads Examples py...

CVE-2024-23334

CVE-2024-23334 !IMPORTANT Keep in mind that sometimes aiohttp may be configured in another folder and not in the static one, if that is the case change the value of the folder variable in the script. How To Use Exploit !CAUTION Disclaimer: This script is made for ethical uses...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL required. If just URL given, it will RCE, else it...

APT_REPORT

APTREPORT collected by @blackorbird https://x.com/blackorbird Interesting apt report & sample & malware & technology & intellegence collection APT Group for country Threat Actor Groups Tracked by Palo Alto Networks Unit 42...

RIPPL

RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...

peda

peda PEDA - Asistencia de Desarrollo de Exploits en Python para GDB Características principales: Mejora la visualización de gdb: colorea y muestra los códigos de desensamblado, registros e información de memoria durante la depuración. Añade comandos para soportar la depuración y el desarrollo de...

CVE-2024-24590-ClearML-RCE-CMD-POC

ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...

RunAsWinTcb

RunAsWinTcb Overview RunAsWinTcb uses an userland exploit to run a DLL with a protection level of WinTcb-Light. Overview of the vulnerability and the capabilites of an exploit can be found here: https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387...

CVE-2022-40684

CVE-2022-40684 Individual or batch exploit for CVE-2022-40684 How to use Generate public key python3 exp.py -u ip:port -k idrsa2048.pub -l hosts.txt for batch processing with a file FOFA title="FortiGate"...

CVE-2025-9074

Description Vibe coded a small exploit script in pure Bash without dependencies on tools that might not be installed. The script talks to the internal Docker API, creates and starts a new container, mounts the host C drive and then executes a command inside that. The output is streamed back to th...