232316 matches found
CVE-2015-7547-Research
Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...
CVE-2019-11932-SupportApp
CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...
CVE-2007-4607
CVE-2007-4607 https://joeyrideout.com/reworking-decade-old-exploit-code/...
CVE-2022-23253-PoC
CVE-2022-23253-PoC CVE-2022-23253 PoC...
CVE-2022-35914
Script in Ruby for the CVE-2022-35914 - RCE in GLPI CVE-2022-35914 Just add the Target to the Script. Usage: ruby.exe exploit.rb = whoami You can close with: = exit...
Grafxploit
Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...
CVE-2024-24919
Takes in a ip list and you can specify threads with -t python3 exploit.py -i ips.txt -t 15 -o output.txt For educational purposes only...
CVE-2023-2255
Command to execute the creation of the exploit: sudo python3 starkelevate.py /home/bob/Downloads/librecommand.exe --output librecommand.odt educational purposes only...
CVE-2015-0311
Reupload of an old Linux/Firefox port of an exploit for CVE-2015-0311 Use-after-free in Adobe Flash Player I created for educational purposes...
wpstorecart-exploit
Simple PoC of wpstorecart before 2.5.30 plugin exploit CVE-2012-3576 written in bash...
CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit
CVE-2017-9805StrutsFuzzNSploit Just a terrible script I wrote in Python3 to fuzz and if desired, exploit via Metasploit: CVE-2017-9805 RCE for CTF's or whatever in accordance with the thugcrowd DWTFYW Public License I stole from those cool cats =...
VisualDoor
VisualDoor Exploit de SonicWall SSL-VPN, utilizado por Phineas Fisher para hackear el Cayman Trust Bank y Hacking Team. No autenticado, te da un shell de 'nobody'. Obtener root es un ejercicio para el usuario. Para más detalles ver:...
cheese
Exploit di root per Quest 3/3S per l'aggiornamento del 7 agosto 2025 e precedenti, basato su CVE-2025-21479. screenshot di Magisk, Cheese e Termux con una shell di root Avvertenza: Il rooting è pericoloso. Se brickate un Quest 3/3S, non c'è modo di ripararlo. Questo disabilita tutta la sicurezza...
safer-eval-cve-CVE-2019-10760
safer-eval-cve-CVE-2019-10760 The following proof-of-concept POC exploit addressing safer-eval version 1.3.1 and below is the first publicly known payload to attack this version range. Contributing Please consult CONTRIBUTING for guidelines on contributing to this project...
CVE-2021-22600__DirtyPagetable
CVE-2021-22600 DirtyPagetable This project aims to exploit a well-know kernel linux CVE-2021-22600 with DirtyPagetable technique. Author: Telmo Sendino This project is part of my final thesis in the UPV/EHU university for the Computer Engineering degree. Only for educational purposes...
CVE-2026-7459
CVE-2026-7459 CVE-2026-7459 Simple History Missing Authorization Account Takeover Exploit...
CVE-2025-55182
CVE-2025-55182 React2Shell Exploit PoC ⚠️ WARNING: This project intentionally uses vulnerable software for security research purposes only. Credits All credits for the PoC go to @maple3142 Setup & Running Docker docker-compose up --build The app will be available at http://localhost:3000 Exploit...
struts-pwn
struts-pwn Un exploit para Apache Struts CVE-2017-5638 Uso Probando una sola URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Probando una lista de URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Comprobando si la vulnerabilidad existe en una sola UR...