CVE-2020-29134

Totvs Fluig Platform Fluig is the productivity and collaboration platform that integrates with the ERP system, and your company's other systems to revolutionize the way you and your team work. CVE-2020-29134 The TOTVS Fluig platform allows path traversal via parameter encoded in base64. When...

snallygaster

snallygaster Encuentra fugas de archivos y otros problemas de seguridad en servidores HTTP. ¿qué? snallygaster es una herramienta que busca archivos accesibles en servidores web que no deberían ser públicos y que pueden suponer un riesgo de seguridad. Los ejemplos típicos incluyen repositorios gi...

scapy

Scapy Scapy es un potente programa y biblioteca de manipulación interactiva de paquetes basado en Python. Es capaz de forjar o decodificar paquetes de una amplia variedad de protocolos, enviarlos por la red, capturarlos, almacenarlos o leerlos usando archivos pcap, emparejar solicitudes y...

SMB_CVE-2025-24071

CVE-2025-24071 PoC Método SMB + Extracción TAR Este es un PoC para explotar CVE-2025-24071 , una vulnerabilidad en Windows que permite la filtración del hash NTLM a través de archivos .library-ms. Esta versión difiere ligeramente de otras al usar un archivo .tar en lugar de un .zip, lo que mejora...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Proof of Concept of Libreoffice file exfiltration vulnerability in Big Blue Button These ODT files show how to exploit a file exfiltration vulnerability that can happen with server-side Libreoffice rendering, e.g. BigBlueButton. Background:...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...

CVE-2023-42326

pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This Python script is a Proof-of-Concept PoC exploit for the command injection vulnerability CVE-2023-42326 in pfSense 2.7.0. The vulnerability allows authenticated attackers to inject and execute arbitrary commands via the...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

collisions

TL;DR getting an MD5 collision of these two images is now trivial and instant. ⟷ Don't play with fire, don't rely on MD5. Colliding any pair of files has been possible for many years, but it takes several hours each time, with no shortcut. This page provide tricks specific to file formats and...

dirtycaw-projet

Dirty COW - Privilege Escalation CVE-2016-5195 This project demonstrates a privilege escalation using the Dirty COW vulnerability in a virtual machine with Ubuntu Server 16.04.1 and kernel 4.4.0-31-generic. 🔧 Environment Victim machine : Ubuntu 16.04.1 vulnerable student without privileges Attack...

fernflower

fernflower Quickly decompile class files in the terminal Usage: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: No more need for jd-gui, it is more powerful than jd-gui...

CVE-2024-4577

CVE-2024-4577 Environment Setup Files and PHP Files --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...

CoffeeLdr

CoffeeLdr CoffeeLdr is a loader for so called Beacon Object Files. This project can be used for testing Beacon Object files without using the Cobalt Strike framework or can be used to give custom implants a way to execute BOFs that where designed for Cobalt strike. But most of the Beacon Api...

CVE-2021-34429

CVE-2021-34429 POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 Sensitive File Disclosure Using Encoded URIs to access files inside WEB-INF directory Setting up the testing Environment Prequistics: Installing docker and docker-compose on your system For debain based distros ex. Ubuntu, Kali Linux et...

warcannon

WARCannon - Procesamiento paralelo de WARC catastróficamente potente WARCannon fue construido para simplificar y abaratar el proceso de 'grep en internet'. Con WARCannon, puedes: Construir y probar patrones de expresiones regulares contra datos reales de Common Crawl Cargar fácilmente conjuntos d...

Maldoc-Analysis

Maldoc-Analysis In March 2023, a new sample was identified as malware. The malware originated from files with .xls and .doc extensions and is known as "Bank Slip.xls". The malware's activity is related to vulnerabilities identified as CVE-2017-11882 and CVE-2018-0802...

CVE-2026-12513

CVE-2026-12513: Shared Files 1.7.68 — Unauthenticated Arbitrary File Deletion via Path Traversal 📖 Advisory Overview CVE-2026-12513 is an unauthenticated Arbitrary File Deletion vulnerability via Path Traversal affecting the Shared Files and Shared Files Pro WordPress plugins before version 1.7.6...

CVE-2022-24716-2

CVE-2022-24716 Icinga Web 2 is an open source monitoring web interface, framework and command line interface. Unauthenticated users can leak the contents of user-accessible local system files from the web server, including icingaweb2 configuration files with database credentials. Installation Usa...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...