Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

shannon

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 Usage • This exploit can only be run for multi targets python3 exploit.py --file urls.txt References https://github.com/hakivvi/CVE-2022-29464...

CVE-2020-0787-EXP-ALL-WINDOWS-VERSION

CVE-2020-0787-EXP-ALL-WINDOWS-VERSION Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other actions, the author is not responsible. Introduction CVE-2020-0787-EXP Support ALL Windows Version...

used_sock

usedsock Kernel exploit for iOS 12-12.2 and 12.4. This isn't meant to be used in a jailbreak. You can find the writeup here...

CVE-2019-16278-PoC

CVE-2019-16728-PoC CVE-2019-16728 Reference https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...

libfb_mem_exploit

This repository does not have a README...

ExtractKeyMaster

ExtractKeyMaster Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431...

cve-2017-8760

Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...

CVE-2022-30190

CVE-2022-30190 - Microsoft Support Diagnostic Tool About This script will attempt to create a Microsoft Office document which will remotely execute code. Setup git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help Options usage:...

CVE-2024-6387

CVE-2024-6387 This is an altered PoC for d0rb/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them...

CVE-2020-1938

CVE-2020-1938 CVE-2020-1938 Vulnerability Reproduction Exploit script: https://laolisafe.com/thread-612-1-1.html Environment: apache-tomcat-8.5.32 java powershell exploit environment - python Start Tomcat sh ./startup.sh Exploit The tool is only for security research and internal self-inspection...

CVE-2020-7247

CVE 2020-7247 PoC exploit for OpenSMTPD 6.4.0...

CVE-2015-6967-EXPLOIT

CVE-2015-6967-EXPLOIT CVE-2015-6967 PoC Exploit This Python script exploits a vulnerability in Nibbleblog CVE-2015-6967 to upload a reverse shell on a vulnerable target. The script takes user input for the target URL, user credentials, and your host IP/port, and then proceeds to exploit the...

libmsm_acdb_exploit

Original code is written by @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...

CVE-2020-2883

CVE-2020-2883 First clone the framework git clone https://github.com/Y4er/CVE-2020-2555 Then place CVE20202883.java into the src/com/supeream/CVE20202883.java directory Import into IDEA and run CVE20202883.java for RCE! Screenshot...

pacpoc

PACPoC: A local PoC exploit for CVE-2019-2205 To try out this exploit install the "malicious" app PacTest.apk and make exploit.pac available over http with, for example python -m SimpleHTTPServer. Then go to proxy settings on an Android device, select proxy autoconfig, and enter the URL to...

CVE-2018-19323

CVE-2018-19323: GIGABYTE GDrv Exploitation Framework Overview This repository contains a complete and advanced exploitation framework for CVE-2018-19323 , a critical vulnerability in the GIGABYTE gdrv.sys driver. This vulnerability allows unprivileged users to read and write arbitrary...

POC-CVE-2018-10933

POC-CVE-2018-10933 LibSSH Authentication Bypass Exploit using RCE References of code Git Repo of https://www.youtube.com/watch?v=ZSWQjmfcn4g example More information about the vulnerability https://www.libssh.org/security/advisories/CVE-2018-10933.txt https://vulners.com/cve/CVE-2018-10933...

exploit-workshop

exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...