mariadb-13-rce-lab

مختبر RCE لـ MariaDB 13.0.1-rc تنفيذ كود عن بُعد على صورة MariaDB 13.0.1-rc الرسمية Docker غير المعدّلة بصلاحية uid 999 mysql. نسختان من الاستغلال: النسخة| الملف| المتطلبات| ملاحظات ---|---|---|--- SQL خالص موصى به| exploitpuresql.py| حساب MariaDB بصلاحيات منخفضة + TCP| لا وصول للمضيف، لا docker،...

Fortinet-PoC-Auth-Bypass

Fortinet-PoC-Auth-Bypass Bash Proof of Concept PoC for Fortinet Authentication Bypass - CVE-2022-40684 Usage: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Available in Exploit-db: https://www.exploit-db.com/exploits/51092...

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805 An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks. usage: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh https://my.vpn.ip:443...

xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

xss_vulnerability_challenges

XSS भेद्यता परिदृश्य चुनौतियाँ यह रिपॉजिटरी एक डॉकरीकृत PHP एप्लिकेशन है जिसमें कुछ XSS भेद्यता चुनौतियाँ शामिल हैं। चुनौतियों के पीछे के विचार हैं: जावास्क्रिप्ट वैलिडेशन बाइपास HTML एंटिटी बाइपास WAF बाइपास ब्लैक-लिस्ट वैलिडेशन बाइपास बेसिक XSS वैलिडेशन बाइपास XSS का शोषण करने के लिए WAF का डबल...

topera

Topera project page You can see more extensive reference of Topera at our web page at github: Topera project page What's Topera? Topera is a new security tools for IPv6, with the particularity that their attacks can't be detected by Snort. Snort is the most known IDS/IPS and is widely used in man...

MyJWT

MyJWT codebeat badge Introduction This cli is for pentesters, CTF players, or dev. You can modify your jwt, sign, inject ,etc... Check Documentation for more information. If you see problems or enhancement send an issue.I will respond as soon as possible. Enjoy : Documentation Documentation is...

libssh-scanner

libssh scanner Introduction This is a python based script to identify hosts vulnerable to CVE-2018-10933. Libssh scanner has two modes: passive banner grabbing and aggressive bypass auth to validate vulnerability's existence. By default, libssh scanner uses passive mode but supply the -a argument...

CVE-2022-36537

CVE-2022-36537 ملخص يستخدم R1Soft Server Backup Manager إطار ZK كإطار رئيسي. تتطلب أمانه من جميع أطراف مشاريع Web3 إيلاء المزيد من الاهتمام لنقاط الضعف الأمنية لمختلف البنى التحتية لـ Web3 وتصحيحها في الوقت المناسب لتجنب المخاطر الأمنية المحتملة وخسائر الأصول الرقمية. سنقوم بالكشف في الوقت المناس...

cve-2022-25640-exploit

Exploiting CVE-2022-25640 using scapy See CVE-2022-25640.ipynb. CVE-2022-25640 is a vulnerability in wolfSSL before 5.2. It allows a client to circumvent mututation authentication in TLS 1.3 connections...

CVE-2022-22978

CVE-2022-22978 Spring-Security bypass Demo When using RegexRequestMatcher in Spring Security and the regex rule contains a dot ., an attacker can bypass authentication by crafting a malicious packet. Affected Range Spring Security 5.5.x Spring Security 5.6.x http://localhost:8080/admin/index%0a...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentication Bypass Kaiten - a workflow management system. A vulnerability in Kaiten allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their logi...

POC-CVE-2024-38820

CVE-2024-38820 Proof of Concept Overview This project demonstrates CVE-2024-38820 , a vulnerability in Spring Framework's DataBinder that allows bypassing disallowedFields protection due to locale-dependent case conversion issues. Vulnerability Details CVE ID : CVE-2024-38820 Affected Component :...

RFCrack

/ | | | / | | | | / \ ' - / \ / - | / \ V V / ' / \ || - /||// /| ///|. //, / / |/ | /| | | || | / | | '/ /| / / | || || , | \ Welcome to RFCrack - A Software Defined Radio Attack Tool Developer: @Ficti0n - http://ConsoleCowboys.com CCLabs: http://cclabs.io Blog: console-cowboys.blogspot.com...

CVE-2024-31719----AMI-Aptio-5-Vulnerability

AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...

exploit-CVE-2025-29927

Exploit for CVE-2025-29927 Next.js - Authorization Bypass Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Next.js is a React framework for building full-stack web application...

NfSpy

NfSpy - an ID-spoofing NFS client by Daniel Miller NfSpy is a Python library for automating the falsification of NFS credentials when mounting an NFS share. Included are two client programs: nfspy uses the Filesystem in Userspace FUSE library to mount an NFS share in Linux. This allows the use of...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...

Papers

This repository is intended to host my research papers. Put it on watch if you would like to read more from me. Bypassing XSS Detection Mechanisms Download PDF A Phonetic Approach to Calculate Linguistic Information in Text Download PDF...

Next.JS-CVE-2025-29927

Next.js Vulnerability Scanner CVE-2025-29927 A security tool to detect and verify Next.js applications vulnerable to CVE-2025-29927 Authentication Bypass. Features 🎯 Accurate Next.js detection with multiple verification methods 🔍 Precise version comparison to identify vulnerable instances 🛡️...