cve-2022-23131-exp

Zabbix SSO Auth Bypass CVE-2022-23131 root@kitploit: usage: zabbixsessionexp.py -h -t TARGET -u USERNAME -p PROXY -f FILES optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Zabbix Server -u USERNAME, --username USERNAME Zabbix Admin User -p PROXY, --proxy...

CVE-2014-7911-CVE-2014-4322_get_root_privilege

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: andy website: https://blog.csdn.net/koozxcv how to build Import the project into eclipse,and build. bug info http://seclists.org/fulldisclosure/2014/Nov/51 analysis...

CVE-2004-2271

CVE-2004-2271 Minishare 1.4.1 Remote Buffer Overflow...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

apache-struts-cve-2017-9805

The Apache Struts web framework The Apache Struts web framework is a free open-source solution for creating Java web applications. Web applications differ from conventional websites in that web applications can create a dynamic response. Many websites deliver only static pages. A web application...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Use DNSlog for vulnerability verification of CVE-2021-26295. Poc usage: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot properly generate the payload exp: python exp.py https://baidu.com then enter th...

keepass_dump

Keepass-Dumper This is my PoC implementation for CVE-2023-32784 My version is a python port of @vdohney's PoC along with a few changes and additional features. Changes One change, was to use known strings that can be found within the dump file in order to more accurately jump to the location of t...

POC-CVE-2021-42013-EXPLOIT

-ff0055?style=for-the-badge&logo=python root@kitploit: 🔥 CVE-2021-42013 Exploit Framework by Makaveli 💀 Multidimensional Cosmic Hacker Mode activated... An advanced scanning, exploitation, and remote interaction tool designed to detect and exploit the Apache Path Traversal + RCE CVE-2021-42013...

perwendel__spark_CVE-2016-9177_2-5-1

Spark - a tiny web framework for Java 8 Spark 2.9.4 is out!! root@kitploit: com.sparkjava spark-core 2.9.4 Sponsor the project here https://github.com/sponsors/perwendel For documentation please go to: http://sparkjava.com/documentation For usage questions, please use stack overflow with the...

cve-bench

CVE-Bench A benchmark for evaluating LLM agents on fixing real-world security vulnerabilities. Agents run inside sandboxed Docker containers and are scored against the maintainer's security test suite. Requirements Python 3.12+ Docker OPENAIAPIKEY, ANTHROPICAPIKEY, and/or POOLSIDEAPIKEY in your...

hatiyar

Hatiyar Modern security toolkit for penetration testing, vulnerability assessment, and security research. ⚠️ IMPORTANT: Hatiyar is intended for educational, research, and defensive security use only. Do not use this software on systems you do not own or do not have explicit written permission to...

CVE-2015-8088

CVE-2015-8088 Source of PoC code. Detail of the CVE: https://vulners.com/cve/CVE-2015-8088 Detail of the Vulnerability: http://kernfunny.org/blog/cve-2015-8088-heap-based-buffer-overflow-in-the-hifi-driver-of-huawei-smart-phone.html...

CVE-2020-10759-poc

Summary Exploits CVE-2020-10759 - fwupd PGP signature verification bypass. See https://github.com/justinsteven/advisories/blob/master/2020fwupddanglings3bucketandCVE-2020-10759signatureverificationbypass.md for more details. Requirements Note: You need to install python3-gpg from your OS vendor...

kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF which exploits CVE-2021-21551. It only overwrites the beacon...

frameworks_base_AOSP10_r33_CVE-2020-0137

This repository does not have a README...

CVE-2019-3396

This repository does not have a README...

CVE-2021-44228-Apache-Log4j-Rce

CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and Do not rely on a current Java version to save you. Update Log4 or remove the JNDI lookup. Disable the expansion seems a pretty bad idea anyways. Bypass rc1...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

poc-cve-2019-5736

PoC-CVE-2019-5736 PoC for CVE-2019-5736...

CVE-2019-0604

CVE-2019-0604 cve-2019-0604 SharePoint RCE exploit blog: https://www.cnblogs.com/k8gege/p/11093992.html wiki: https://github.com/k8gege/K8CScan/wiki/%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8-CVE-2019-0604-SharePoint-GetShell-Exploit...