ActiveMQ-RCE

ActiveMQ RCE Effect version verison open -a calculator Open a http server python3 -m http.server Run the Main.java file change the address as needed...

sunset-noontide-pentesting

Sunset: Noontide — Тестирование на проникновение Профессиональная оценка тестирования на проникновение и прохождение CTF машины Sunset: Noontide — намеренно уязвимой машины от VulnHub. Этот проект документирует полный жизненный цикл тестирования на проникновение, включая разведку, перечисление...

web-application-firewall-

Web Application Firewall Simulation Overview This project demonstrates a Web Application Firewall WAF simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits th...

CVE-2022-1388-POC

CVE-2022-1388 Poc by PsychoSec Improved POC for CVE-2022-1388 that affects multiple F5 products. This is an improved version of Horizon3's Proof of Concept for CVE-2022-1388: https://github.com/horizon3ai/CVE-2022-1388 This version contains multiple improvements as well as an interactive shell to...

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template This nuclei template is to verify the vulnerability without executing any commands to the target machine...

CVE-2021-3156-plus

CVE-2021-3156 This is a warehouse modification based on @CptGibbon and supports arbitrary command execution. 相关阅读：CVE-2021-3156 - Exploit修改 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on : @CptGibbon Ubuntu 20.04 against sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 Al...

CVE-2011-2523

CVE-2011-2523 This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules How to install ? Install dependencies : pip3 install termcolor argparse Git cloning the project git clone...

CVE-2021-27928

Information Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep patch through...

CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit This repository contains a Go-based proof-of-concept tool for testing a known Control Web Panel CWP vulnerability scenario related to CVE-2026-57517. The implementation targets a blind SQL injection path and includes optional webshell deployment and command execution fl...

CVE-2021-40373

CVE-playsms There is a vulnerability in playsms 1.4.3 that allows potential attackers to execute remote code execution. how to reproduce RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms login using admin:admin...

CVE-2022-24706

CVE-2022-24706 Contributors White Hat School 4th Batch 39th Class Geum Jeong-hyeon@junghyeonkum CouchDB Erlang Distribution Remote Command Execution Vulnerability CVE-2022-24706 Summary Apache CouchDB is an open-source document-oriented NoSQL database implemented in Erlang. Because Apache CouchDB...

cve-2021-26084-confluence

cve-2021-26084-confluence Просто выполните команду без мозга...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Usage python3 CVE-2025-63406.py -u -n -p -c Arguments -u, --url: Base U...

seetong-ts81xxd3x-rce

PoC — RCE на отладочном сервере RLog CVE-2026-100886 Демонстрационный стенд показывает, что прошивочный libLOG.so запускает сервер RLog на TCP/3000. Анализ диспетчера команд и динамические тесты демонстрируют неаутентифицированное выполнение команд ОС через этот сервер. Он загружает собственный...

CVE-2007-2447-Exploit

CVE-2007-2447 Exploit This repository contains an exploit for Samba smbd 3.0.20 CVE-2007-2447 that allows remote command execution via crafted SMB requests. Prerequisites This exploit requires Python 3 and a few dependencies. It's recommended to set up a virtual environment before running the...

cve-2023-4220-poc

CVE-2023-4220 Chamilio exploit PoC Shamelessly Copied from Directly inspired by: https://starlabs.sg/advisories/23/23-4220/ Usage: Chamilio CVE-2023-4220 POC Exploit positional arguments: url The Chamilio Url. e.g. http://example.com options: -h, --help show this help message and exit -c C The...

CVE-2018-1335

CVE-2018-1335 RCE vulnerability remote code execution on servers apache Tika-server with versions lower than 1.18 commands: sudo bash install.sh python2 exploit.py...

CVE-2020-5902-F5BIG

CVE-2020-5902-F5BIG Just Run Command like 👇 go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m R -f /etc/issue or go run CVE-2020-5902-F5BIG-Scanner.go -u ... -p 443 -m C...

CVE-2025-30065-PoC

CVE-2025-30065 PoC Usage Build the image docker build -t cve-2025-30065 . Generate the malicious Parquet docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Trigger the exploit docker run --rm -v $pwd:/poc/out cve-2025-30065 trigger...