struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 Usage: Pre-requisites: have python, docker, maven and a jdk installed 1. clone this repo 2. run mvn clean package in project root 3. run docker build -t hack . 4. run docker run -d -p...

CVE-2025-5777

CVE-2025-5777 AKA CitrixBleed 2 Is an OOB read in the login process of Citrix Gateway. This is a Proof of Concept exploiting the OOB CVE-2025-5777 to obtain memory data from a vulnerable Citrix Gateway instance, possibly leading to cookies/credentials theft. Usage I highly recommend using a venv...

pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi is firmware for the Raspberry Pi Pico W that turns it into a driverless USB Wi-Fi adapter, enumerating as a USB CDC-NCM device. :figure-caption: AI Slop .pico-usb-wifi Diagram...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

kubesploit

!Licenselicense-imglicense !Downloadsdownload Kubesploit Kubesploit es un servidor y agente de Comando y Control C&C HTTP/2 multiplataforma para post-explotación, diseñado específicamente para entornos contenerizados, escrito en Golang y construido sobre el proyecto Merlin de Russel Van Tuyl...

wifite2

Wifite This repo is a complete re-write of wifite, a Python script for auditing wireless networks. Wifite runs existing wireless-auditing tools for you. Stop memorizing command arguments & switches! Wifite is designed to use all known methods for retrieving the password of a wireless access point...

CVE-2018-7600

CVE-2018-7600 PoC for CVE-2018-7600 Drupal SA-CORE-2018-002 Drupalgeddon 2. Installation: $ git clone https://github.com/dwisiswant0/CVE-2018-7600 $ cd CVE-2018-7600/ $ composer install Usage: $ php exploit.php WARNING! For Educational Purposes Only! References: -...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

drupalgeddon-2

Drupalgeddon-2 Vuln checker for Drupal v7.x + v8.x Usage : php drupalgeddon.php Target http://example.com :...

dezlock-dump

dezlock-dump Extracts everything from a running Source 2 game Deadlock, CS2, Dota 2 and generates a patch-proof C++ SDK that resolves offsets at runtime. No hardcoded values, no manual updates when the game patches. Quick Start 1. Download from Releases or build from source 2. Launch your game —...

CVE-2020-17530

CVE-2020-17530 s2-061 poc:...

CVE-2022-35500

CVE-2022-35500 Stored Cross-site Scripting XSS in leave comment functionality in Amasty Blog Pro for Magento 2 Description The leave comment functionality in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 allows injection of JavaScript code in the AmBlogLeaveComment mutation in name...

web-application-firewall-

Web Application Firewall Simulation Overview This project demonstrates a Web Application Firewall WAF simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits th...

LaZagneForensic

¡El Proyecto LaZagne !!! Descripción ¡El proyecto LaZagne está de vuelta !!! LaZagne utiliza una función interna de Windows llamada CryptUnprotectData para descifrar las contraseñas de los usuarios. Esta API debe ser llamada en la sesión del usuario víctima, de lo contrario, no funciona. Si la...

cleverhans

CleverHans latest release: v4.0.0 This repository contains the source code for CleverHans, a Python library to benchmark machine learning systems' vulnerability to adversarial examples. You can learn more about such vulnerabilities on the accompanying blog. The CleverHans library is under continu...

CVE-2024-33676

CVE-2024-33676 Weak authentication and authorization on Enel X JuiceBox Level 2 EV charger enables access to operating system functions and parameters. Description Users on the local EV charger WLAN network can extract PII, change settings, and manipulate the operating system file system. This is...

linux-exploit-suggester-2

This repository does not have a README...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

rbac

PHP-RBAC v2.x PHP-RBAC is an authorization library for PHP. It provides developers with NIST Level 2 Hierarchical Role Based Access Control and more, in the fastest implementation yet. Current Stable Release: PHP-RBAC v2.0 Connect With Us Home Page: http://phprbac.net/ OWASP Project Page:...