bluebox

Bluebox work in progress A collection of exploits for different VoIP products. Thanks to the Go Exploit Framework. If you ended up here looking for a VoIP pentesting solution, check out Sippts sippts-gui in Kali or SIPVicious. This project is more focused on the exploitation phase. Install git...

MetasploitMCP

Metasploit MCP Server A Model Context Protocol MCP server for Metasploit Framework integration. https://github.com/user-attachments/assets/39b19fb5-8397-4ccd-b896-d1797ec185e1 Description This MCP server provides a bridge between large language models like Claude and the Metasploit Framework...

ghostlock-aresin

GhostLock CVE-2026-43499 — POCO F3 GT aresin Data-only physmap overwrite exploit for MediaTek Dimensity 1200 MT6893. Kernel: 4.14.186-android13 / MIUI V14.0.4.0.TKJCNXM. ⚠️ Prerequisites Device : POCO F3 GT / Redmi K40 Gaming Edition codename: aresin Chipset : MediaTek Dimensity 1200 MT6893 OS :...

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap script. https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ Usage: $ python usermapscript.py RHOST -- The target address RPORT -- The target port TCP : 139 LHOST -- The listen address LPORT -- The listen port Installation sudo apt install...

opentsdb_key_cmd_injection

opentsdbkeycmdinjection An exploit for OpenTSDB = 2.4.1 cmd injection CVE-2023-36812/CVE-2023-25826 written in Fortran About This is an exploit for a command injection vulnerability in OpenTSDB verions 2.4.1 and prior CVE-2023-36812/CVE-2023-25826. The exploit is written in modern Fortran and...

Auto-Root-Exploit

Auto-Root-Exploit Auto Root Exploit Tool Author : Nilotpal Biswas Facebook : https://www.facebook.com/nilotpal.biswas.73 Twitter : https://twitter.com/nilotpalhacker USAGE : for kernel version 2.6 all bash autoroot.sh 2 for kernel version 3 all bash autoroot.sh 3 for kernel version 4 all bash...

Pompem

Pompem - Exploit and Vulnerability Finder Pompem is an open source tool, designed to automate the search for Exploits and Vulnerability in the most important databases. Developed in Python, has a system of advanced search, that help the work of pentesters and ethical hackers. In the current...

CVE-2022-24816

Usage of CVE-2022-24816 script Prerequisites 1. Clone the repository : git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git cd CVE-2022-24816 2. Install dependencies : Ensure you have Python 3 installed. Then, install the required dependencies by running: pip install -r requirements.txt The...

CVE-2022-22947-exp

CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...

CVEsLab

CVEsLab A collection of proof-of-concept exploit scripts, docker lab environments, and Securi Trust Team-discovered vulnerabilities for written by the team at Securi Trust for various CVEs...

CVE-2017-15708

CVE-2017-15708 exploit...

CLFS

CLFS attack - CVE-2023-28252 Since February 2022 was reported a new ransomware that appears to be using a Windows 0-day vulnerability, according to the research conducted by Trend Micro. More information about this ransomware can be found at this link. According to analysis by Kaspersky, the...

CVE-2023-41362_MyBB_ACP_RCE

CVE-2023-41362 - MyBB ACP RCE Exploit for CVE-2023-41362 Blog post: https://blog.sorcery.ie/posts/mybbacprce...

CVE-2021-21978

CVE-2021-21978 CVE-2021-21978 EXP VMware View Planner RCE CVE-2021-21978 Reverse shell...

security-labs-pocs

Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...

AndroidKernelVulnerability

Android Kernel Vulnerability Overview In November 2017 a use-after-free bug to linux kernel was detected by syzkaller system. In February 2018 this was patched in some linux kernels and android versions. This fix was never included in Android monthly security bulletins, so it was not patched in...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

CVE-2019-8781-macOS

CVE-2019-8781 Security Advisory CVE-2019-8781 POC Details The POC elevate the process to root and execute a shell. Exploit environment - macOS 10.14.6 18G95 Should works on all macOS version that's released before 10.15.0 - SMEP: On - SMAP: Off - Kernel ASLR slide passed to the argv1 Building You...

WindowsElevation

What's this This project is mainly used to collect the commonly used exp of Windows platform and give the relevant repair scheme. On the one hand, it is helpful for security researchers to quickly complete the right raising in the process of penetration testing, on the other hand, it is also...