MySQL-Remote-Root-Code-Execution

MySQL-Remote-Root-Code-Execution Usage python rcemysql.py -dbuser -dbpass -dbname -dbhost -mycnf...

intel_amt_bypass

intelamtbypass POC simple para CVE-2017-5689 uso: python amibypass.py x.x.x.x...

RCE-in-Spring-Cloud-CVE-2022-22963

Exploit for RCE in Spring Cloud CVE 2022-22963 Exploit for CVE-2022-22963 remote command execution in Spring Cloud Function See for details about the vulnerability here and here PoC Run the netcat on your host: $ nc -lvnp 9001 Run the exploit example with default port 9001 on attacker host: $...

drupalgeddon-2

Drupalgeddon-2 Vuln checker for Drupal v7.x + v8.x Usage : php drupalgeddon.php Target http://example.com :...

CVE-2024-48990-POC

CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Obfuscate & Virtualize PowerShell Code PowerShell Pro Obfuscator protects proprietary .ps1 scripts with renaming, polymorphic string and integer encryption, control-flow flattening, finite-state automata FSA, a VM engine, self-defending integrity checks, a protection...

Joomla-CVE-2023-23752-Exploit-Script

Usage python exploit.py http://example.com...

CVE-2026-100741: Improper Neutralization of Directives in Dynamically Evaluated Code

Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileges of the service account, via a...

CVE-2019-19781-Forensic

CVE-2019-19781-Forensic Note : My advice is now to use the official tool published by fireeye & citrix : https://github.com/fireeye/ioc-scanner-CVE-2019-19781 This little script was created to help security analyst to discover traces of successful CVE-2019-19781 exploits on their systems. Feel fr...

CVE-2024-31497

-CVE-2024-31497 Un script diseñado para descubrir vulnerabilidades en Putty explotando CVE-2024-31497...

CVE-2019-7238

CVE-2019-7238 RCE python3 CVE-2019-7238.py url...

detect-cve-2018-16858

detect-cve-2018-16858 $ python3 detect-cve-2018-16858.py...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

SUDO-privilege-escalation

SUDO Privilege Escalation Overview: This project demonstrates the exploitation of the Sudo privilege escalation vulnerability CVE-2023-22809. The objective is to simulate how an attacker can gain unauthorized root access by exploiting this vulnerability in a controlled environment. Technologies...

PoC_CVE-2025-32432

CraftCMS CVE-2025-32432 - Clean PoC Cleaned-up and improved version of the original Proof of Concept. Credits Original research: Orange Cyberdefense & Chirag Artani Cleaned-up and improved version: n40y License This project is licensed under MIT. See the LICENSE file for more details. Disclaimer...

CVE-2025-55182

CVE-2025-55182 - PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations...

CVE-2024-22909

CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Prueba de ConceptoPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md Prueba de ConceptoPoC : https://github.com/BurakSevben/CVE-2024-22909/blob/main/CVE-2024-22909.md...

CVE-2022-1292

CVE-2022-1292 Automation to validate the impact of the vulnerability CVE-2022-1292 on a specific system. This script checks, validates and exploits the vulnerability...

CVE-2009-4623

CVE-2009-4623 Remote shell on CVE-2009-4623: Get a non-interactive shell, open another shell for an advanced use !!! usage: CVE-2009-4623.sh hostnameandPath example: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php options: -h this cruft...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell Description This script is a penetration testing tool designed to exploit the CVE-2022-42889 vulnerability, also known as Text4Shell, within Apache Commons Text versions -param $PARAMETER -L $LHOST -P $LPORT Example python3 exploit.py -t 10.10.10.10 -p 8080 -u /search/...