1266892 matches found
semgrep-rules
semgrep-rules Welcome! This repository contains Semgrep's Community Edition rules. In addition to the rules in this repository, the Semgrep Registry offers proprietary Pro rules that offer additional language coverage, and unlock crossfile and deep dataflow analysis. Find rules: search for...
Mybb-XSS_SQL_RCE-POC
Mybb-XSSSQLRCE-POC Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc Before Use: There are two files here: 1.js and attacklisten.py You should modify these two file: 1.js: modify the mybb forum url and attack url: var bashurl = 'http://192.168.92.164/mybb/mybb-mybb1825' mybb forum url var...
CVE-2021-31728
CVE-2021-31727 and CVE-2021-31728 Public Reference for CVE-2021-31727 Exposes unrestricted disk read/write capabilities. Public Reference for CVE-2021-31728 Exposes arbitrary ring 0 code execution directly. Credit Lima X helped with SystemBigPoolInformation idea...
deepsecrets
DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...
CVE-2024-4885
CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution CVE-2024-4885 Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/ Usage python3...
CVE-2024-32004
Create tmp repo, set uploadpack.allowfilter to true git init tmp git -C tmp config uploadpack.allowfilter 1 Clone evil from tmp repo git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configure remote filter script git -C evil config remote.origin.uploadpack...
uc_browser_poc_CVE-2022-1364
UCBrowserExploit.js Introduction All content below refers to the UC Browser exploit explored in this article posted by Interrupt Labs. Getting Started This exploit relates to previous versions of the UC Browser that include the RCE bug of CVE-2022-1364. This bug was patched in the UC browser in...
psobf
PowerShell Obfuscator Its goal is to transform code to hinder analysis and static signatures, useful in labs and authorized Red Team/Pentesting engagements. Supports 6 levels of obfuscation plus a transforms/pipeline architecture that allows stacking techniques such as string tokenization, light...
CVE-2020-5245
CVE-2020-5245 1. Run mvn clean install to build your application 2. Start application with java -jar target/dropwizard-1.0-SNAPSHOT.jar server config.yml 3. To check that your application is running enter url http://localhost:8080 some error in pom.xml plugins were not affected reproduce Reproduc...
php-malware-finder
PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detect potentially malicious PHP files. What does it detect? PHP-malware-finder does its very best to detect obfuscated/dodgy code as well as files usi...
CVE-2023-36664-Ghostscript-command-injection
Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...
CVE-2023-46818-python-exploit
CVE-2023-46818 exploit This is a python version of the original php script for the vulnerability affecting ispconfig 3.2.11 and previous versions. Original PHP source: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html This proof-of-concept is intended for...
CVE-2019-5624
CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...
bludit-CVE-2019-17240
bludit-CVE-2019-17240 Bypass bludit mitigation login and upload malicious to call a rev shell...
XSS2Shell
XSS2Shell ULTIMATE v3.0 WordPress Pre-Auth XSS β RCE Chain Exploit Developed by G0D150NE π Features π Auto-detect XSS & WordPress version π― 3 Modes: Auto, XSS, Direct π‘ Callback server to capture credentials π WebShell with multiple execution methods π Persistence cron job, hidden admin,...
nginx-1.4.0
nginx-1.4.0 For the analysis of CVE-2013-2028 exploit: exp-nginx.rb binary for rop build: nginx...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution β 1 No SQL Injection β 2 Cross site Scripting β 3 Broken Access Control β 4 Broken Session Management β 5 We...
CVE-2026-58025
CVE-2026-58025 β MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter β LogEntryBase::extractParams β unserialize user-controlled logparams β RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...
CVE-2025-30065
π₯ CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. π¦ Usa...
msf-module-CVE-2019-0708
CVE-2019-0708 Bluekeep Metasploit module for CVE-2019-0708 BlueKeep Pulled from https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/exploits/windows/rdp and fixed File copy instructions 1. Make a folder named 'rdp' in...