Exch-CVE-2021-26855

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...

Log4jHorizon

Log4jHorizon Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more. Crossing the Log4j Horizon - A Vulnerability With No Return Code and README.md this time around are a little scatered. Updates coming! Why? Proof of concepts for this vulnerability are scattered and have ...

CVE-2015-8550

CVE-2015-8550...

cve-2016-0095-x64

cve-2016-0095-x64 windows 7 Ultimate Ultimate x64 poc of cve-2016-0095MS16-034 A newbie starts learning cve, referencing: https://whereisk0shl.top/ssctfpwn450windowskernelexploitationwriteup.html and the code from expert k0shl at https://github.com/k0keoyo/SSCTF-pwn450-ms16-034-writeup. Modified ...

Eaton-UPS-Companion-Exploit

Overview The Eaton UPS Companion software checks for an update every single week over an insecure HTTP connection and evals the content of whatever is at the update URL. This allows an attacker to craft a JavaScript function which uses the low-level OS operations that already exist in the backend...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...

CVE-2019-7192_QNAP_Exploit

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit for now, you can read system files /etc/shadow, ssh private key, etc. Usage: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port Sample Output Vulnerability The vulnerabilities can be...

CVE-2023-23752-Joomla

CVE-2023-23752-Joomla Disclaimer: This cybersecurity tool is provided solely for technical support and does not involve any application or commercial use. Users must not use this cybersecurity tool in any way that infringes upon the legitimate rights and interests of others. The operation of this...

Dirty-Pipe-CVE-2022-0847

This repository does not have a README...

vankyo-s30-bootloader-unlock

Vankyo S30 Bootloader Unlock Unlock the bootloader on a Vankyo MatrixPad S30 Unisoc SC9863A using the CVE-2022-38694 FDL1 method. The S30's BootROM accepts unsigned FDL1 in download mode without requiring the ROP bypass, which simplifies the unlock significantly. Quick Start ./unlock.sh --prebuil...

CVE-2020-1938-Clean-Version

CVE-2020-1938-Clean-Version CVE-2020-1938GhostCat clean and readable code version Me...

CVE-2024-32002-git-rce

This repository does not have a README...

CS4239-Spring4Shell-POC

CS4239-Spring4Shell-POC Proof of concept for CVE-2022-22965 Spring4Shell for CS4239 G410 report. Adapted from this PoC to demonstrate unpatched & patched behavior. Running the demo There are 2 example programs dockerized in this repository with identical source code. One uses a vulnerable version...

CVE-2021-33739_PoC_Analysis

This is what I analyzed and studied about CVE-2021-33739 PoC. You can get the full resources from here: https://github.com/freeide2017/CVE-2021-33739-POC...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...

CVE-2026-26801-pdfmake-ssrf

pdfmake SSRF Vulnerability PoC Vulnerability Summary Field| Value ---|--- Package| pdfmake Version| = 0.3.0-beta.2, CREDENTIALS LEAKED! This proves the vulnerable server made an outbound request to our controlled endpoint. Full Read SSRF npm run exfiltrate The a...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

CVE-2022-28099

This repository does not have a README...

FEP3370-advanced-ethical-hacking

DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...