CVE-2020-5902

🚨 CVE-2020-5902 — F5 BIG-IP TMUI RCE CVE-2020-5902 is a critical unauthenticated Remote Code Execution RCE vulnerability in the F5 BIG-IP Traffic Management User Interface TMUI / Configuration utility. 📌 Overview Disclosed by F5 on June 30, 2020 NVD published July 1, 2020, this flaw allowed...

CVE-2017-11882-

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ Kudos, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

RadareEye

A tool for scanning nearby devices and execute command when the target device comes in between range.. NOTE:- RadareEye Owner will be not responsible if any user performs malicious activities using this tool. Use it for Learning purpose only. Installation of RadareEye : git clone...

CVE-2016-4438

ref: https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037PoC.py https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037CmdToolExP.py...

CVE-2021-43326_Exploit

CVE-2021-43326 Exploit Automox Windows Agent Privilege Escalation Exploit Lacework Labs Blog Post https://www.lacework.com/blog/cve-2021-43326/ Automox Community Post...

susinternals

susinternals - back from the dead by @deft @cablethief & @randomwalksp reino This tool allows you executing commands remotely via the PSExeSVC service from a python script. It can be used to: Authenticate as a user with a primary token: Authenticate as system: Full blog post can be found here!...

MSSQL-Pentest-Cheatsheet

🗄️ MSSQL Pentest Cheatsheet A practical Microsoft SQL Server penetration testing cheat sheet designed for penetration testers, red teamers, and cybersecurity learners to understand how to enumerate, exploit, and abuse misconfigured MSSQL databases during security assessments. 🌐 Connect With Us 🔵...

Solr_CVE-2019-17558

SolrCVE-2019-17558 usage: python3 SolrCVE-2019-17558.py url whoami...

CVE-2017-7269-exploit

Modified from https://github.com/edwardz246003/IISexploit.git Usage -h : Select host default 127.0.0.1 -p : Select port default 80 Append command at the end default regedit, currently this script only supports up to 8 characters...

dinkleberry

Dinkleberry 🫐 Are you one of the 92,000+ people1 stuck with a D-Link NAS vulnerable to CVE-2024-3272, and no patch in sight? This tool uses the exploit itself to patch a vulnerable device. 1: See original disclosure in refs What it does Dinkleberry will execute a command to swap out the vulnerabl...

exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain...

CVE-2022-30190

CVE-2022-30190 - Microsoft Support Diagnostic Tool About This script will attempt to create a Microsoft Office document which will remotely execute code. Setup git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help Options usage:...

CVE-2020-14882_ALL

CVE-2020-14882ALL CVE-2020-14882ALL comprehensive exploitation tool, supporting command echo detection, batch command echo, external XML command execution without echo, and other features. Required modules: requests, http.client The tool is only for authorized security testing. Do not use it...

CVE-2021-43287

CVE-2021-43287 POC: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url EXP: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be...

loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

ATutor-Instructor-Backup-Arbitrary-File

ATutor-Instructor-Backup-Exploit Exploit Title: ATutor 2.2.4 'Backup' Remote Command Execution CVE-2019-12170 Google Dork: inurl:/ATutor/login.php Date: 5/13/2019 Exploit Author: liquidsky Joseph McPeters Vendor Homepage: https://atutor.github.io/ Software Link:...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

CVE-2025-3248-POC

CVE-2025-3248-POC POC of CVE-2025-3248 execute any command on target machine usage: python poc.py 'http://xxx.com' 'ls /' leave some love on victims' computers poc.py...

fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Vulnerable Exploit Description Use this exp,you can bypass authentication and run cmd USEAGE sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 exp.py usage: exp.py -h --target TARGET --port PORT --username USERNAME...

aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 Description : allows remote authenticated users to execute arbitrary commands via the setting menu of Sotfware Store. Affected version : All = 6.6.6 Information To make this PoC, I just installed the software using docker-compose Vulnerability Type : Remote...