Zimbra-CVE-2026-73570-Rules

Reglas de Wazuh para CVE-2026-73570 Inyección de comandos del sistema operativo en Zimbra Reglas de detección para CVE-2026-73570 , una inyección de comandos del sistema operativo en Zimbra Collaboration Suite a través del parámetro de notificación de trampas SNMP snmpnotify. Vulnerabilidad Campo...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Cisco SD-WAN Privilege Escalation Exploit ⚠️ ADVERTENCIA Este código es SOLO para fines educativos y pruebas de seguridad autorizadas. 📋 Descripción CVE-2026-20245 es una vulnerabilidad de escalada de privilegios en la CLI de Cisco Catalyst SD-WAN Controller vSmart, Cisco Catalyst...

Struts2-048

Struts2-048 CVE-2017-9791 Autor: DragonEgg def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

quasibot

quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...

wordpress-shell

wordpress-shell Shell de ejecución de comandos de Wordpress barata y desagradable. ¡Ejecuta comandos como el servidor web con el que sirves Wordpress! El shell subido probablemente estará en /wp-content/plugins/shell/shell.php Instalación Para instalar el shell, asumimos que tienes acceso...

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: $ curl -i -s -k -X $'POST' \ -H $'Host: :8443' \ ...

ginger

Ginger Ginger is an open source security assessment tool that helps in assessing the security of a given Pentaho BA application instance. Please keep in mind that this project is still a work in progress, and not all features might be present or work as intended. Usage Ginger has only one mandato...

LDAPFragger

LDAPFragger LDAPFragger es una herramienta de Comando y Control que permite a los atacantes enrutar datos de beacon de Cobalt Strike a través de LDAP utilizando atributos de usuario. Para información de contexto, lea el blog de lanzamiento:...

routers-exploit

OpenSource Repo with PoC's and vulns found in routers TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC CVE-2020-9374 - TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC Payload: "$ls" TP LINK TL-WR849N - Auth Bypass: Firmware and Configs update TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC...

PHP-8.1.0-dev_WebShell-RCE

PHP 8.1.0-dev WebShell RCE Unauthenticated Exploit Code for PHP 8.1.0-dev WebShell RCE Unauthenticated Expected outcome: Exploiting backdoor installed on PHP 8.1.0-dev server thereby obtaining WebShell to execute commands remotely. Intended only for educational and testing in corporate...

bip

Bip Bip is a project which aims to simplify the usage of python for interacting with IDA. Its main goals are to facilitate the usage of python in the interactive console of IDA and the writing of plugins. In a more general way the goal is to automate recurrent tasks done through the python API. B...

HBSQLI

HBSQLI: Probador Automatizado para Inyección SQL Ciega Basada en Cabeceras HBSQLI es una herramienta automatizada de línea de comandos para realizar ataques de inyección SQL ciega basada en cabeceras en aplicaciones web. Automatiza el proceso de detección de vulnerabilidades de inyección SQL cieg...

botnet-hackpack

SIMPLE C&C BOTNET This hackpack will walk you through implementing a basic framework that fundamentally characterizes a botnet. It might help if you've worked with C before. If you liked this tutorial, be sure to star this repo! Note: Don't use anything you learn here for malevolent purposes. Thi...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

oxasploits

oxasploits A number of exploits written by oxagast Most of these CVEs are accreddited to oxagast as well Contact: Marshall Whittaker [email protected] CVEs and PoC code CVE-2006-3392 Webmin =1.29 remote root exploit This exploit, lifts a Webmin cookie with a directory transversal and aritrar...

CVE-2026-26833

CVE-2026-26833: OS command injection in thumbler Summary thumbler through version 1.1.2 allows OS command injection in thumbnail in lib/thumbler.js. The package concatenates the input, output, time, and size values into a single ffmpeg command string and executes that string with childprocess.exe...

CVE-2023-20198-Exploit

Cisco IOS XE Authentication Bypass CVE-2023-20198 This repository contains a proof-of-concept exploit for CVE-2023-20198 , an authentication bypass vulnerability affecting Cisco IOS XE Web UI. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable Cisco...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

mylg

myLG, Herramienta de Diagnóstico de Red en Línea de Comandos myLG es una utilidad de software de código abierto que combina las funciones de diferentes sondas de red en una sola herramienta de diagnóstico de red. Características Vidrios de red populares ping/trace/bgp: Telia, Level3, NTT, Cogent,...