killasa

killasa Vulnerability Test for CVE-2016-1287 Cisco ASA invalid IKE fragment length Negotiates IKEv2 SA with Cisco fragmentation enabled, then sends two IKE fragments, one of which has an invalid length of 1 octet...

Blueborne-CVE-2017-1000251

Blueborne A simple bluetooth DoS using the blueborne exploit CVE-2017-1000251...

CVE-2020-2883

CVE-2020-2883 First clone the framework git clone https://github.com/Y4er/CVE-2020-2555 Then place CVE20202883.java into the src/com/supeream/CVE20202883.java directory Import into IDEA and run CVE20202883.java for RCE! Screenshot...

ka-cve-2021-21341

ka-cve-2021-21341...

my-cve-2021-4034-poc

my-cve-2021-4034-poc my PoC quick and dirty code as uni has me busy, works on my ubuntu server...

CVE-2021-4034

This repository does not have a README...

bw-dump

BW-Dump Updated 2 : This vulnerability was assigned CVE-2023-38840. Updated : A patch was released on GitHub pull request 5813 which fixes the vulnerability. The affected versions are Bitwarden Desktop 2023.7.0 and below. Description A proof-of-concept tool that extracts the master password from ...

CVE-2021-42013

CVE-2021-42013 Description This script exploits CVE-2021-42013 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install git clone...

PewSWITCH

PewSWITCH A FreeSWITCH specific scanning and exploitation toolkit for CVE-2021-37624 and CVE-2021-41157. Related blog: https://0xinfection.github.io/posts/analyzing-freeswitch-vulns/ Usage The help statement of the tool is as below: $ ./pewswitch --help . / |\ / /| // / / / - |/|/ /\ | |/|/ / / /...

Log-4j-scanner

log4j-scan A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers not only 3-4 headers as previously seen tools. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters...

wp2shell-Hestia-Scanner

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators across all hosted sites — with per-client email reports, core file diff, SHA256 webshell detection, risk scoring, and optional AI evaluation. ⚠️ Safe...

cve-2023-28244

cve-2023-28244...

Polkit-CVE-2021-4034-HLP

Polkit-CVE-2021-4034-HLP Polkit CVE-2021-4034 exploitation in High-Level Programming Language Build make LHOST=ip.or.domain.tld LPORT=8000 Usage Open TCP port listener, example with ncat on loopback ncat -vl 127.0.0.1 8000 Run exploit php $ARCHexploit.php python $ARCHexploit.py...

WSOB

😭 WSOB CVE-2022-29464 😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464. CVE-2022-29464 details: Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a...

CVE-2021-25281

CVE-2021-25281 Chaining CVE-2021-25281 and CVE-2021-25282 to exploit a SaltStack...

frameworks_base_AOSP10_r33_CVE-2021-0337

This repository does not have a README...

CVE-2023-4762-Code-Review

Source https://github.com/buptsb/CVE-2023-4762...

CVE-2022-26133

CVE-2022-26133 Description Atlassian Bitbucket Data Center Deserialization Vulnerability CVE-2022-26133 Batch Verification and Exploitation Vulnerability Verification Batch python3 CVE-2022-26133.py -u http://192.168.110.136:7990 -f target.txt Exploitation Disclaimer: This tool is only used for...

CVE-2024-27956

CVE-2024-27956 CVE-2024-27956...

cve-2019-14540-exploit

CVE-2019-14540 Exploit http://www.leadroyal.cn/?p=939 Environment limitation: This demo uses the jndi ldap exploitation method, so a low version less than 8u191 of the jdk is required. 1. Use marshalsec to create an ldap service on local port 1389, pointing to the http service on local port 8000...