Windows-X64-RAT

Windows x64 Remote Access Trojan RAT Objective Develop a Windows x64 RAT using CVE-2023-38831 WinRAR 6.23 and Shellcode exploitation to bypass Windows Defender. System Description 1. Shellcode Initialization Generate shellcode using Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode. 2...

CVE-2023-37903

CVE-2023-37903 Exploit for CVE-2023-37903 Proof Of Concept & Reverse Shell CVE Owned by: SeungHyun Lee...

perl-CVE-2013-1775

CVE-2013-1775 Apple Mac OSX 10.8.4 - Privilege Escalation Perl version of CVE-2013-1775 Apple Mac OSX 10.8.4 - Privelege Escalation exploit. References: https://www.exploit-db.com/exploits/27965/...

CVE-2023-20198-Checker

Cisco-IOS-EX-Scanner CVE-2023-20198 CVE-2023-20198 & 0Day Implant Scanner tested in a lab and works, YMMV Quick and dirty scanner to run checks if the host is vulnerable/been compromised using 0day in Cisco IOS XE. This tool is designed to scan a given target or a list of targets to determine...

Moodle-authenticated-RCE

Moodle 4.4.0 - Authenticated Remote Code Execution CVE-2024-43425 Exploit CVE: CVE-2024-43425 Affected Versions Moodle 4.4 to 4.4.1 Moodle 4.3 to 4.3.5 Moodle 4.2 to 4.2.8 Moodle 4.1 to 4.1.11 Description This exploit targets an authenticated Remote Code Execution RCE vulnerability in Moodle...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...

CVE-2021-3560

CVE-2021-3560 Polkit - Local Privilege Escalation Original discovery by kevinbackhouse from GitHub Security Lab References https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ https://www.youtube.com/watch?v=QZhz64yEd0g https://ubuntu.com/security/CVE-2021-3560 Blog...

CVE-2021-44228-PoC-log4j-bypass-words

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on 🐱‍💻 ✂️ 🤬 LOG4J Java exploit - WAF and patches bypass tricks 📝 Description CVE-2021-44228 works on: log4j: 2.0 = Apache log4j = 2.14.1 Java version already patched: 6u211+, 7u201+, 8u191+, 11.0.1+. Windows...

patch-cve-2021-1675

This repository does not have a README...

DirtyPipe-CVE-2022-0847

DirtyPipe-CVE-2022-0847 This repository is developed to analysis and understand DirtyPipe exploit CVE-2022-0847 for my 3rd year 1st year secure software system assignment. Paper I wrote paper will availble after my semester ends...

PoC-RCE-CVE-2025-55182

🔥 RSC RCE Exploit Toolkit Advanced exploitation toolkit for React Server Components Remote Code Execution vulnerabilities For authorized penetration testing and security research only Features • Installation • Usage • Shodan Integration • Examples • Disclaimer 📋 Table of Contents Overview...

EvilRip

Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...

CVE-2025-55182-mass

CVE-2025-55182 Scanner Simple command-line tool for detecting and exploiting CVE-2025-55182 React Server Components RCE in Next.js applications. Installation root@kitploit: chmod +x scanner.sh && chmod +x automate.sh Usage root@kitploit: Scan with default command id bash automate.sh -l domains.tx...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

hello-ReGrade-security

hello-ReGrade-security A hands-on demo of zero-day discovery withReGrade. You'll point an ordinary test suite at ReGrade, record it against a tiny service, replay it against a second copy of the same service , and use Claude Code + the ReGrade MCP tools to surface a password-hash leak — a...

React-Server-Components-Remote-Code-Execution-CVE-2025-55182-

This repository does not have a README...

CVE-2024-2961

CVE-2024-2961 Uses CVE-2024-2961 to perform an arbitrary file read Usage Use with wrapwrap for maximum potency. root@kitploit: usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t...

CVE-2019-1458

CVE-2019-1458 Windows LPE Exploit Caution YOU ONLY HAVE ONE CHANCE TO EXPLOIT FOR EACH KERNEL REBOOT!!!! Screenshot Supported Version Windows 2012 R2 Tested Windows 8 Tested Windows 2008 R2 x64Tested Windows 7.1 x64 Tested Windows 7 x64 Windows 2012 x64 Windows 2008 x64 ALL X32 VERSION SYSTEMS AR...

cve-2022-44268-detector

cve-2022-44268-detector - detect malicious PNGs cve-2022-44268-detector is a Go program that consumes PNGs and reports whether they appear to be malicious images generated by an exploit for CVE-2022-44268, an ImageMagick vulnerability that allows attackers to read arbitrary file contents using...

CVE-2023-35813-PoC

Sitecore Remote Code Execution Vulnerability CVE: 2023-35813 discovered by @mwulftange CVSS Score: 9.8 Severity: Critical This is the fantastic blog post from the researchers that found it: https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/ Figure out what command you want to...