log4shell_ioc_ips

j4shelliocips big dump from known log4j/log4shell malicious ip adresses unique and sorted update once a hour only if changes were made! CVE-2021-44228 happy hunting disclaimer This script is parsing a lot of Source so this list maybe has a lot of false positives don't block all ips in your...

mass_cve-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 Screenshot Usage ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Note ! results will be automatically saved in vuln.txt u can add a common dir on...

WhatsPayloadRCE

WhatsPayloadRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? root@kitploit: sudo apt install git git clone https://github.com/Err0r-ICA/WhatsPayloadRC...

Exploit-CVE-2025-24799

Exploit-CVE-2025-24799 Exploit CVE-2025-24799 : GLPI - Injection SQL non authentifiée Installation root@kitploit: git clone https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799 cd Exploit-CVE-2025-24799 pip3 install -r requirements.txt python3 exploit.py -h Rejoignez Rootkit Researchers...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

Log4j-check

Log4j-check يدعم تجاوز RC1 مكوّن إضافي لمسح log4j في Burp، CVE-2021-44228، يدعم تجاوز RC1، يدعم نوع بيانات json، يدعم dnslog.cn وDNS المدمج في Burp، ويمكن استخدامه مع JNDIExploit لتوليد الحمولات Payload تعديل تم إجراؤه على المكوّن الإضافي fastjson الخاص بـ @pmiaowu؛ استخدم المؤلف الأصلي dnslog.cn...

geoserver-

GeoServer CVE-2024-36401 Exploitation Tool GeoServer CVE-2024-36401 Environment: JDK8 Disclaimer: For authorized testing only. The author bears no responsibility for any consequences caused by user misuse. Please comply with laws and regulations! 1. Default payload: POST /geoserver/wfs HTTP/1.1...

Follina_Exploiter_CLI

Follina Exploiter CLI Tool MSDT Vulnerability CVE-2022-30190 A Command Line based python tool for exploit Zero-Day vulnerability in MSDT Microsoft Support Diagnostic Tool also know as 'Follina' CVE-2022-30190. Info : New Microsoft Office zero-day used in attacks to execute PowerShell Made In...

CVE-2025-0108-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this article are intended solely for network security research and educational purposes. No one shall use the information provided herein for illegal purposes or unauthorized system testing. The author is not responsible for any...

swapgs-attack-poc

PoC de l'attaque SWAPGS CVE-2019-1125 Ce dépôt contient les sources du PoC de l'attaque SWAPGS présenté publiquement au Black Hat USA 2019. Contenu leakgsbkva - variante 1 recherche des valeurs aléatoires dans la mémoire du noyau ; limitée à l'en-tête de l'image du noyau PE leakgsbkvat - variante...

CVE-2024-38856_Scanner

CVE-2024-38856 Réservé à un usage éthique uniquement. Toute activité nuisible ou malveillante est interdite. Vous en êtes seul responsable. CVE-2024-38856 : Scanner et exploit d'exécution de code à distance pour Apache OFBiz L'analyse de la CVE :...

Proxyshell-Scanner

Proxyshell-Scanner nuclei scanner for Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 discovered by orange tsai in Pwn2Own, which affect microsoft exchange server. POC Resource https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

cve-2024-42327

cve-2024-42327 usage: cve-2024-42327.py -h -u URL -n USERNAME -p PASSWORD --example cve-2024-42327.py: error: the following arguments are required: -u/--url, -n/--username, -p/--password...

CVE-2021-1675-LPE-EXP

CVE-2021-1675-LPE-EXP Simple LPE Exploit of CVE-2021-1675 Usage root@kitploit: CVE-2021-1675-LPE.exe C:\test\MyPigDLL.dll MyPigDLL.dll,is a test DLL which will create C:\test.txt if succeed Notice 1. Add EnumPrinterDriversW for get pDriverPath, so We dont need change the "hardcode Driver path"...

CVE-2025-27636-Apache-Camel-PoC

Apache Camel CVE-2025–27636 & CVE-2025-29891 PoC CVE-2025–27636 and CVE-2025-29891 are vulnerabilities in Apache Camel that affect versions: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. Exploitation of these vulnerabilities can enable attackers to execute internal Camel methods. The following is a...

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 и CVE-2023-2640 : Повышение привилегий Bash-однострочник для повышения привилегий в Ubuntu с использованием CVE-2023-32629 и CVE-2023-2640. ПОЛНОСТЬЮ СТАЩЕНО ИЗ https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 ПОЖАЛУЙСТА, СДЕЛАЙТЕ РЕТВИТ...

CVE-2024-32640-SQLI-MuraCMS

Muraider - أتمتة اكتشاف واستغلال CVE-2024-32640 \ SQLi في Mura/Masa CMS الاستخدام الاكتشاف: python3 CVE-2024-32640.py --url https://target.com/ استغلال Ghauri مرر الوسيط '-g' أو '--ghauri' كوسيطة: أدخل أي وسائط ترغب في استخدامها مع Ghauri، باتباع قائمة الوسائط الخاصة به: python3 CVE-2024-32640.py...

SEP-14.2-Arbitrary-Write

استغلال CVE-2020-5837 يمكن العثور على الشرح في مدونة مختبرات RedyOps: https://labs.redyops.com/index.php/2020/04/27/symantec-endpoint-protection-sep-14-2-eop-via-arbitrary-write/ أدوات الطرف الثالث يعتمد كود الاستغلال هذا بشكل كبير على أدوات اختبار الروابط الرمزية التي طورها James Forshaw. يمكن...

UnmarshalPwn

UnmarshalPwn POC for CVE-2018-0824 For details see https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html...

cve-2019-2215

CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215 Based on a proof-of-concept by Jann Horn & Maddie Stone of Google Project Zero Overview Demonstration of a kernel memory R/W-only privilege escalation attack resulting in a temporary root shell. It works on Google Pixel 2/Pixel 2...