1462455 matches found
CVE-2021-34527
CVE-2021-34527...
ms08-067.py
📖 Overview This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Python3 Authorized testing...
CVE-2021-2456
CVE-2021-2456 CVE-2021-2456...
winrar-cve-2023-38831-poc-gen
CVE-2023-38831 Exploit Generator This tool is a Python script that exploits a vulnerability in the RAR file format CVE-2023-38831 to execute a malicious command when a user opens a bait file. The exploit works on WinRAR versions before 6.23. For Example 6.22, 6.21, 6.20 or above. Requirements...
Apache-OFBiz-Exploit
Apache-OFBiz-Exploit Exploit for Apache OFBiz CVE-2024-38856 By: Alisson Faoli Description This repository contains an exploit for the CVE-2024-38856 vulnerability found in Apache OFBiz. The flaw allows Unauthenticated RCE Remote Code Execution. Note: This exploit is provided for educational and...
copyfail-alpine
This is a more minimal port of Copy Fail LPE CVE-2026-31431 which patches the first few bytes of /etc/passwd so that su-ing to root requires no password. This reduces the total size of the original exploit and makes it more portable. Distributions like Alpine use busybox/musl instead of a...
Fix-Apple-Mail-CVE-2020-9922
Fix-Apple-Mail-CVE-2020-9922 Apple Mail has a scary zero-click vulnerability. Versions of OS X prior to High Sierra were not patched. https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c I made this quickly and only tested it on Mavericks. I don't see any...
CVE-2022-0847-dirty-pipe-checker
CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-2022-0847 "Dirty Pipe" https://dirtypipe.cm4all.com/ Usage Check current kernel version ./dpipe.sh Check specific kernel version ./dpipe.sh 5.10.11...
CVE-2018-10933
This repository does not have a README...
CVE-2020-14645
This repository does not have a README...
defender-privilege-escalation-scanner
Defender Vulnerability Scanner Microsoft Defender vulnerability scanner — CVE-2026-41091 / CVE-2026-45498 Detects security weaknesses in Microsoft Defender deployments. For authorized security testing only. Features CVE-2026-41091 detection CVE-2026-45498 detection Microsoft Defender posture...
VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS
Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...
text4shellburpscanner
text4shellburpscanner This project is modified from log4j2burpscanner, with the active scanning feature removed. It will be added back later if needed. CVE2022-42889 Target range link: https://github.com/karthikuj/cve-2022-42889-text4shell-docker.git You can also follow the main account's officia...
CVE-2020-14882-checker
CVE-2020-14882 checker CVE-2020-14882 detection script This checker is based on the PoC by jas502n. Using a gadget, it tries to substitute the HTTP response from a page, which an unauthenticated user should not have access to. python cve202014882checker.py --ip 192.168.1.75 python...
fail2ban-log4j
fail2ban-log4j fail2ban filter that catches attacks against log4j CVE-2021-44228 Installation Copy this file to your fail2ban filter.d directory, which is usually something like /etc/fail2ban/filter.d or similar. Add an apache-jndi section to your jail.local or jail.conf: apache-jndi enabled = tr...
VEN0m-Ransomware
VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...
Pixel-Flood-Attack
Pixel Flood DoS - CVE-2024-22393 PoC Pixel Flood Bug for Web Servers A lightweight Proof-of-Concept to test for the Pixel Flood memory exhaustion vulnerability in web applications running vulnerable versions of Apache Answer. Table of Contents Description Technical Details Affected Versions...
Solar-exploiting-log-4j
🔥 Solar Exploiting Log4j - TryHackMe Walkthrough 📌 Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability 🧠 Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. 🛠️ Tools Used Nmap Burp Suite cURL...