CVE-2014-6287

Rejetto HttpFileServer 2.3.x - Remote Command Execution CVE-2014-6287 🚨 About the Exploit This is a proof-of-concept exploit for the well-known Remote Command Execution vulnerability in Rejetto HttpFileServer HFS v2.3.x , identified as CVE-2014-6287. By abusing the vulnerable search functionality...

sunflower_exp

CVE-2022-10270 Affected versions: Sunflower Personal Edition Windows --thread Number of threads for scanning default thread count: 100 --help help sunflowerpocexp.py vulnerability verification and scanning tool Port detection: eg：python sunflowerpocexp.py --scan --ip --port --thread parameters...

SpotifyC2

SpotifyC2 — Cloud-Based Command Channel Research Execute commands through a Spotify playlist and receive command output through Telegram. What is SpotifyC2? SpotifyC2 is a Windows-based cybersecurity research project that demonstrates how publicly accessible cloud services can be used as a...

CVE-2024-21683-RCE

CVE-2024-21683-RCE Credit https://x.com/realalphaman https://realalphaman.substack.com/p/quick-note-about-cve-2024-21683-authenticated Usage git clone https://github.com/W01fh4cker/CVE-2024-21683-RCE cd CVE-2024-21683-RCE pip install requests bs4 python CVE-2024-21683.py -u...

CVE-2022-22947

CVE-2022-22947 poc: pocsuite -r CVE-2022-22947POCEXP.py -u url --verify exp: pocsuite -r CVE-2022-22947POCEXP.py -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be used for...

DropboxC2C

DropboxC2C DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations. DO NOT USE THIS FOR MALICIOUS PURPOSES. THE AUTHOR IS NOT RESPONSIBLE FOR ANY MISUSE OF THIS PROGRAM. Dropbox-C2C is an old project of mine to use a thirdparty for command and...

Striker

Striker C2 Striker is a simple Command and Control C2 program. Disclaimer This project is under active development. Most of the features are experimental, with more to come. Expect breaking changes. Features A Agents Native agents for linux and windows hosts. Self-contained, minimal python agent...

ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

SNOWCRASH

SNOWCRASH A polyglot payload generator Introduction SNOWCRASH creates a script that can be launched on both Linux and Windows machines. Payload selected by the user in this case combined Bash and Powershell code is embedded into a single polyglot template, which is platform-agnostic. There are fe...

MSSqlPwner

MSSqlPwner MSSqlPwner is an advanced and versatile pentesting tool designed to seamlessly interact and pwn MSSQL servers. That tool is based on impacket, which allows attackers to authenticate to databases using clear-text passwords NTLM Hashes, and kerberos tickets. With MSSqlPwner, users can...

CVE-2025-50505

CVE-2025-50505 Unauthorized API Leads to Arbitrary Command Execution and Privilege Escalation in Clash Verge Rev Description The vulnerability stems from an unauthenticated API endpoint exposed by the clash-verge-service component, which is installed with elevated privileges by default. This flaw...

shard

shard A command line tool to detect shared passwords Usage List options: Shard 1.5 can run in 3 modes: 1 Single user single password - Use -u and -p 2 Single user multiple passwords - Use -u and -f 3 Multiple users and multple passwords - Use -f only For more detailed usage examples see the wiki...

CVE-2024-10914-Exploit

SilverX Exploit Tool 📌 Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. ⚠️ Disclaimer This tool is for educational and...

troll-a

Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens from WARC Web ARChive files. Troll-A is an easy-to-use , comprehensive , and fast solution for finding secrets in web archive. Features Protocols: Supports retrieving web archives directly from a...

URS

/\ /\ /'/',\ \ \ \ \ \ //, \ \ /\ \// // // // U niversal R eddit S craper - A comprehensive Reddit scraping command-line tool written in Python. codecov releases Sponsors If this project has saved you time, consider sponsoring its development. | MangoProxy provides residential, ISP,...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

CVE-2026-57546

A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...

CVE-2026-25270

The Android Camera driver is vulnerable to a memory corruption issue caused by an out-of-bounds write . This occurs when the driver processes command buffer requests that contain invalid length parameters . While the specific affected versions are not provided in the documents, the vulnerability ...

CVE-2021-43287

CVE-2021-43287 POC: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url EXP: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be...

PassBreaker

PassBreaker PassBreaker is a command-line password cracking tool developed in Python. It allows you to perform various password cracking techniques such as wordlist-based attacks and brute force attacks. Features Wordlist-based password cracking Brute force password cracking Support for multiple...