1462074 matches found
copy-fail-check
copy-fail-check CVE-2026-31431 Helper based on https://copy.fail/ Copy Fail Quick Check Interactive bash helper to review basic exposure related to CVE-2026-31431 Copy Fail and apply a temporary mitigation based on algifaead. Target compatibility Mainly intended for: Debian / Ubuntu AlmaLinux /...
zerologon-lab
zerologon-lab Scripts for a lab environment demonstrating the Zerologon CVE-2020-1472 vulnerability. Usage zerologon.py zerologon.py -h --reset --restore HEX dcname dcip Attempt to exploit the Zerologon vulnerability against a Domain Controller. Arguments: dcname: The NetBIOS name of the target...
vcenter_saml_login
vCenter SAML Login Tool A tool to extract the Identity Provider IdP cert from vCenter backups and log in as Administrator Background Commonly, during engagements, we will gain access to vCenter backups on a fileserver or gain root access to the VCSA host through recent CVEs. Logging into the...
ESFileExplorerOpenPortVuln
ES File Explorer Open Port Vulnerability - CVE-2019-6447 As per their Google Play description: ES File Explorer File Manager is a full-featured file Images, Music, Movies, Documents, app manager for both local and networked use! With over 500 million users worldwide, ES File Explorer File Manager...
test-vuln
test-vuln a controlled environment to test CVE-2025-55182...
CVE-2020-3452-Exploit
CVE-2020-3452-Exploit Just basic exploit abusing CVE-2020-3452 to enumerate the standard files accessible in the Web Directory of CISCO ASA/FTD applicances. Usage: By default this uses a file list constructed from sample output from CVE-2018-0296 in the Metasploit Framework...
CVE-2021-2394
CVE-2021-2394...
wordpress-really-simple-security-authn-bypass-vulnerable-application
wordpress-really-simple-security-authn-bypass-vulnerable-application This is a vulnerable application to test the exploit for the Really Simple Security 9.1.2 authentication bypass CVE-2024-10924. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is...
CVE-2018-8639-exp
CVE-2018-8639-exp platform: windows 2008 and windows 2008 R2...
spring-cloud-gateway-cve-2022-22947-report
spring-cloud-gateway-cve-2022-22947-report Technical report about CVE-2022-22947 in Spring Cloud Gateway and its exploitation through exposed Actuator endpoints...
CVE-2021-3156-PoC
CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: $ make list targets: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich Contributing Send sensible PR's, I might merge. Some ideas: More targets Target...
CVE-2021-22205
Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...
CVE-2026-31431-PocC
CVE-2026-31431-PoC CVE-2026-31431 PoC reproduced in C, usable for exploitation when Python is not available on the target environment. Vulnerability Basic Information Vulnerability type: Linux kernel AFALG subsystem page cache poisoning, achieving local privilege escalation and possible container...
NextSploit
🔍 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ⚠️ NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...
eternal_scanner
ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video Eternal Scanner 2.0...
pip-audit
pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-database via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail ...
CVE-2019-11580
CVE-2019-11580 A CVE-2019-11580 shell for exploit vulnerability remotely...
cve-2017-0065
Exploiting Edge's read:// urlhandler Introduction This exploit was reported to Microsoft and I was acknowledged for doing so. The exploit has been patched on March 14th 2017 under names cve-2017-0065 and MS17-007 and will not work if related patches are applied. Sourcecode is provided for...
Microsoft-CVE-2022-26809-The-Little-Boy
Microsoft-CVE-2022-26809-aka The Little Boy - POC The poc for CVE-2022-26809 RCE via RPC will be updated here. We are in the process of identifying the vulnerable code and share the simplest one-click RCE here...