CVE-2022-42889

Aplicación de prueba CVE-2022-42889 Este repositorio contiene una aplicación simple que utiliza Apache Commons Text 1.10, la cual es vulnerable a CVE-2022-42889. Ejecución de la aplicación Reemplace el comando nc en DemoApplication.java por la dirección IP de su host. Escuchando con netcat: $ nc ...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

Sharp-SMBExec

Sharp-SMBExec A native C conversion of Kevin Robertsons Invoke-SMBExec powershell script. https://github.com/Kevin-Robertson/Invoke-TheHash/blob/master/Invoke-SMBExec.ps1 Built for .NET 3.5 Usage Sharp-SMBExec.exe hash:"hash" username:"username" domain:"domain.tld" target:"target.domain.tld"...

socks5

socks5 Servidor y cliente Socks5/Socks5h Este proyecto añade soporte de protocolo para Bridge, o se puede usar solo Uso Documentación de la API Ejemplo Soporte para el comando CONNECT Soporte para el comando BIND Soporte para el comando ASSOCIATE Licencia Licenciado bajo la Licencia MIT. Consulte...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability CVE-2022-30525 POC&EXP author:160team.west9B For use only by authorized security researchers. Comply with cybersecurity laws. Any issues arising are your own responsibility, and the author bears no liability. 01-Introduction On May 12,...

QuickResponseC2

Capacidades - Uso - Demostración - Resumen del flujo de trabajo - TODO QuickResponseC2 QuickResponseC2 es un framework de Comando y Control C2 sigiloso que permite una comunicación indirecta y encubierta entre la máquina atacante y la víctima a través de un servidor HTTP/S intermedio. Toda la...

CVE-2026-5426

CVE-2026-5426 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Example usage: Test a single target for vulnerability python...

CVE-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045 Hi! I refactored the original script to use requests library, the other libraries were causing some errors to me. Hope it helps! Usage: python3 cve-2017-5638 url cmd-command...

day08-CISCO-fmc-sim

Day08 — Cisco FMC-style Management RCE Simulation This is a minimal, educational simulation that demonstrates the impact class of a management-plane parsing RCE inspired by CVE-2025-20265. It intentionally executes commands from crafted input for local learning only. Quickstart chmod +x...

CVE-2019-17558_Solr_Vul_Tool

Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...

CmdLineSpoofer

Command Line Spoofer An example of using C to inject a meterpreter shell, whilst spoofing the command line. The command line is stored in the Process Environment Block, is logged when a new process starts, and is displayed in tools such as Process Hacker and Task Manager. Introduction This code i...

CVE-2020-14947

CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...

CVE-2024-29973

CVE-2024-29973 PoC and Bulk Scanner Overview This is a proof-of-concept PoC and bulk scanner for CVE-2024-29973: Command injection vulnerability in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14. Version 1.0.2 - Fixed the payload mechanism...

dnscat2

NOTA: ¡La contraseña para las descargas .zip es siempre "password"! Introducción ¡Bienvenido a dnscat2, un túnel DNS que NO te enfermará y te matará! Esta herramienta está diseñada para crear un canal de comando y control C&C cifrado sobre el protocolo DNS, que es un túnel efectivo para salir de...

dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . Esto ha producido los mejores resultados durante las pruebas. Los saltos de línea en el payload se reemplazan con espacios antes de la subida. ================== Fuentes: https://www.tenable.com/cve/CVE-2020-27976...

CVE-2022-22947-POC

CVE-2022-22947-POC CVE-2022-22947 batch detection script. The echo command is not regex-filtered. Please use it for now; I will update later. Place url.txt in the script directory. Directly run: python 脚本.py Demo: After the scan is complete, a success.txt file will be generated. This script will...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamas. No descansaremos hasta que cada rehén sea liberado y regrese a casa sano y salvo. Puedes ayudar a traerlos de vuelta a...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...