watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC for SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 See our blog post for technical details https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Action root@kitploit: python...

printnightmare

printnightmare CVE-2021-34527 implementation...

CVE-2012-2982

CVE-2012-2982 Python POC for CVE-2012-2982 Webmin 1.580 improved from the original by user OstojaOfficial This is an improved version of the original script that allows the user to see the input data format without needing to view the entire script to discover it. To achieve this, that section of...

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805

Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 inject a root exploit as a silent installation to perform a malicious task on the device. Vulnerability AndroRAT does not focus on targeting a specific user but rather works to acquire the confidence of the entire network...

CVE-2020-6287-exploit

CVE-2020-6287-exploit PoC para CVE-2020-6287 El PoC en Python para agregar usuario únicamente, sin establecer permisos de administrador. Inspirado por @zeroSteiner de Metasploit. Módulo original de PR de Metasploit:...

bitbucket-cve-2022-36804

bitbucket-cve-2022-36804 CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability POC Follow us YouTube Twitter Facebook...

Shitrix-CVE-2019-19781

Shitrix-CVE-2019-19781 My working approach to exploiting Shitrix Updated 21st July, 2020 - now supports multi-worded commands and forward slashes You need curl = 7.42.0 Call it with, e.g.: ./shitrix.sh target port ls -al...

CVE-2024-24919

CVE-2024-24919 Nmap script to check vulnerability CVE-2024-24919 Vulnerability References: https://www.cvedetails.com/cve/CVE-2024-24919/ https://support.checkpoint.com/results/sk/sk182336 Dorks Hunter Hunter: /product.name="Check Point SSL Network Extender" Shodan SHODAN: http.title:"Check Point...

jeremylong__DependencyCheck_CVE-2018-12036_3-1-2

...

CVE-2022-3590-WordPress-Vulnerability-Scanner

CVE-2022-3590 WordPress Vulnerability Scanner This Python script is designed to check whether a WordPress website is vulnerable to the CVE-2022-3590 vulnerability. The vulnerability exploits an unauthenticated blind Server-Side Request Forgery SSRF in the pingback feature of WordPress. Getting...

CVE-2012-2982_Python

CVE-2012-2982Python PoC Python script as an exercice from tryhackme: https://tryhackme.com/room/intropocscripting This is the metasploit CVE: https://www.exploit-db.com/exploits/21851 Those are the changes done after the discovery of the Exploit:...

SignHere

SignHere Introduction CVE-2017-11882 - The unique vulnerability identifier of Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allows an attacker to run code in the context of the current user without...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denial of Service = 4.9.4 Date: 05/02/2018 Software Link: WordPress Version: = 4.9.4 Tested on: KaLi Linux 2018.1 CVE: CVE-2018-6389 Discovered by: Barak Tawily Exploit by: Javier Olmedo HOW TO USE? Clone this repository root@kitploit: g...

CVE-2021-33766

POC Exploit CVE-2021-33766 ProxyToken POC Exploit for CVE-2021-33766 ProxyToken is a handy shell script which provides pentesters and security researchers a quick and effective way to test Microsoft Exchange ProxyToken vulnerability. Disclaimer This program is for Educational purpose ONLY. Do not...

esp32-cve-2025-27840-power-trace-experiment

esp32-cve-2025-27840-power-trace-experiment Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands CVE-2025-27840. When the ESP32 receives the commands, it toggles a GPIO pin to trigger the power trace...

docker-CVE-2021-3156

This repository does not have a README...

CVE-2025-5548

This repository does not have a README...

copy-fail-fix

copy-fail-fix Per-distro mitigation scripts for CVE-2026-31431 "Copy Fail" — a Linux kernel algifaead local privilege escalation that affects essentially every distro shipped since 2017. Each script either installs a patched kernel from your distribution's repos when one is available or, if not,...

pasteguard-PoC

PasteGuard: security advisory CVE status: requested, pending assignment. This finding is published as GHSA-q94x-p9rc-q89f. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-pasteguard-PoC and this banner is replaced with the CVE link...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...