GenGravSSTIExploit

EN GenGravSSTIExploit is a PoC Python script that exploits an authenticated Server-Side Template Injection SSTI vulnerability in Grav CMS versions -p : Target URL in the format https://hostname. : Port number default is 80. Example: python GenGravSSTIExploit.py -t http://example.com -p 8080 4...

nullmap

nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

fortigate-belsen-leak

╔═════════════════════════════════════════════════════════════════════════════╗ ║ ███████╗ ██████╗ ██████╗ ████████╗██╗ ██████╗ █████╗ ████████╗███████╗ ║ ║ ██╔════╝██╔═══██╗██╔══██╗╚══██╔══╝██║██╔════╝ ██╔══██╗╚══██╔══╝██╔════╝ ║ ║ █████╗ ██║ ██║██████╔╝ ██║ ██║██║ ███╗███████║ ██║ █████╗ ║ ║...

CVE-2021-44228

CVE-2021-44228 Log4Shell CVE-2021-44228 Vulnerability Scanner and POC...

CVE-2024-0683

CVE-2024-0683 Test...

CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal challenge inspired by 0xtensho Made for cleaner output and only for reverse shell Usage: Change the host and the listener variable first python3 CVE-2025-49132POC.py Disclaimer LEGAL DISCLAIMER: This Proof of Concept PoC is for educational purpos...

msdt-CVE-2022-30190

msdt-follina-office CVE-2022-30190- A Zero-Click RCE Vulnerability In MSDT...

richfaces-vulnerability-cve-2018-12533-rf-14310

Demonstrates the flaw present in RichFaces 3.3.4 of remote code execution and how to mitigate and/or block Attack example Clone the repository Decoding the payload Deserializing the Java class Generating a payload to test the vulnerability How to mitigate? If you really need this endpoint If you...

CVE-2021-41773

CVE-2021-41773 This is my first time trying to make an exploit for something so...be nice 😁 Exploit Title: Apache HTTP Server 2.4.49 Path Traversal Author: 0xRar , 0xrar.net CVE: CVE-2021-41773 Version: Apache 2.4.49 Not Tested Yet Help Command: python3 exploit.py -h...

CVE-2024-3094-Vulnerabity-Checker

CVE-2024-3094-Vulnerabity-Checker Verify that your XZ Utils version is not vulnerable to CVE-2024-3094 ┌──lypd0㉿kali- └─$ ./CVE-2024-3094checker.sh / / \ / \ \ /. | / \ / \ /. | \ / / / / / \ \ / \ / / / / / You are NOT vulnerable to CVE-2024-3094. Background CISA Cybersecurity and...

CVE-2025-34300POC

Sawtooth Lighthouse Studio has a template injection vulnerability CVE-2025-34300 Parameters: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 Examples: 单个检测： python .\CVE-2025-34300POC.py -u URL 批量检测; python .\CVE-2025-34300POC....

CVE-2023-39539-PoC

CVE-2023-39539-PoC PoC for CVE-2023-39539 in Cacti 1.2.22...

CVE-2024-37032-scanner

CVE-2024-37032 Scanner Scan an entire subnet for vulnerable version of Ollama. If single hose, using X.X.X.X/32...

ludus_xz_backdoor

Ansible Role: xz backdoor CVE-2024-3094 for Ludus An Ansible Role that installs the xz backdoor CVE-2024-3094 on a Debian host and optionally installs the xzbot tool. !WARNING This role deploys malware on purpose! Without exposing the host to the internet you should be safe, but it's still malwar...

CVE-2020-9484

CVE-2020-9484 Tomcat For educational purposes only. See Reference for the details. Run $ git clone https://github.com/masahiro331/CVE-2020-9484.git $ cd CVE-2020-9484 $ docker build -t tomcat:groovy . $ CONTAINER=docker run -d -p 8080:8080 tomcat:groovy Check clean $ docker exec -it $CONTAINER ls...

cve-2025-54236

cve-2025-54236 cve-2025-54236 poc please report any error not tested...

linux-4.1.15_CVE-2023-28772

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

CVE-2022-41040

CVE-2022-41040 Code set relating to CVE-2022-41040. scanner.py is a Python based scanner testing for the CVE-2022-41040. Requirements The only additional modules needed to run this code is requests and colorama. pip install -r requirements.txt Usage This script takes a single URL or a list of URL...

cve-2025-29927-lab

This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...