cve-2023-42115

CVE-2023-42115: Exploit and Payload Generator Scripts This repository contains two Python scripts: 1. exploit.py : A script for exploiting CVE-2023-42115. 2. generatepayload.py : A script for generating reverse shell payloads. Prerequisites Before running the scripts, ensure you have Python 3...

dubiousdisk

dubious disk - the porygon-z that's super effective against secure boot! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more... Overly permissive code in the Windows boot environment allows for overwriting arbitrary memory, and therefore, arbitrary code execution. Exploitro...

CVE-2017-8464-exp-generator

CVE-2017-8464-exp-generator this tool can generate a exp for cve-2017-8486, it is developed by python Usage: CVE-2017-8464.py dllname then there will generate 26 files name as A.lnk,B.lnk,....,Z.lnk then you just need to put the dll file into any of the disk A:/,B:/,....,Z:/ for example, if you p...

janus-toolkit

Janus Toolkit This is a collection of tools for the Janus exploit CVE-2017-13156, affecting AOSP versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 as described here. You can read more at the writeup from Guardsquare. Tools Janus AndroidManifest extractor Usage 1. Extract the AndroidManifest.xml...

sicat

SICAT - The useful vulnerability and exploit finder SICAT is a powerful tool designed to aggregate and search for vulnerabilities and exploits from multiple high-profile sources. It simplifies the reconnaissance phase by automatically checking reputable databases based on keywords, Nmap scan...

VirtualBox-6.0.0-Exploit-1-day

VirtualBox 6.0.0 Exploit 1-day VBox bugs to be used CVE-2019-2525 : crUnpackExtendGetAttribLocation Information Disclosure CVE-2019-2548 : crServerDispatchReadPixels Integer overflow, leading to Heap overflow these bugs can be triggered when 3D Acceleration is enabled. First, before the...

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each entry to path to...

CVE-2022-24112

CVE-2022-24112 Apache APISIX batch-requests RCECVE-2022-24112 Place the target in url.txt python3 ApacheAPISIXRCECVE-2022-24112.py Cmd:...

CVE-2022-22057_SM-F926U

Fork My adaptation for the SM-F926U from the original exploit here HUGE thanks to m-y-mo for discovering the exploit and his extreme patience with all my questions to port this to SM-F926U and make it useable I've added a startup daemon libtimeline.so based on code from Shizuku Added a dirty tric...

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST vulnerability RCE exploit with Java. Features Scan a single target Scan multiple targets Exploit with a shell Setup Lab You can find the lab Here Run You can run the code directly by user javac main.java followed by user java main help If you don't have JVM,...

CVE-2024-5522

EN A PoC exploit scanner for CVE-2024-5522 vulnerability in WordPress websites. This tool helps identify and exploit the vulnerability by scanning a list of target URLs and attempting a specific payload to determine if the site is vulnerable. Features Automatic Vulnerability Scanning : Scans targ...

CVE-2025-24893-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this document are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no...

CVE-2019-7192_QNAP_Exploit

QNAP Pre-Auth Root RCE CVE-2019-7192 CVE-2019-7195 Exploit for now, you can read system files /etc/shadow, ssh private key, etc. Usage: pip install -r requirements.txt or just pip install requests python3 gundy.py https://vulnerableurl:port Sample Output Vulnerability The vulnerabilities can be...

CVE-2024-21006_jar

CVE-2024-21006jar Exploit code reference: https://github.com/momika233/CVE-2024-21006 Here, the source code has been compiled into a JAR package for ease of use. The lib directory contains dependency files. If you wish to modify the source code, you can compile it yourself. Usage java -jar...

CVE-2018-4878

CVE-2018-4878 Flash Exploit Poc ' quick and dirty' For more in-depth info http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Original Poc https://github.com/anbai-inc/CVE-2018-4878 in this repo, I fixed the crash issue, and calculate the right space for the shellcode, check the...

CVE-2024-21762

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-21762...

CVE-2018-4416-exploit

Preface :PROPERTIES: :CUSTOMID: preface :END: OKay, binary security is not only /heap/ and /stack/, we still have a lot to discover despite regular CTF challenge. Browser, Virtual Machine, and Kernel all play an important role in binary security. And I decide to study browser first. I choose a...

CVE-2023-24955-PoC

CVE-2023-24955-PoC Exploit for Microsoft SharePoint 2019 An exploit published for a vulnerability named CVE-2023-24955 .I saw the code and There was some bug in the resolveTargetInfo and getOAuthInfo . Then I fixed it and it's for u now. ❗❗❗❗❗❗ Remember that you should run it with Python2 I tried...

CVE-2020-14882_POC

CVE-2020-14882 Batch Verification Usage python3 CVE-2020-14882.py Put the targets in target.txt, one per line Example...

Trigon

Trigon Trigon is a deterministic kernel exploit based on CVE-2023-32434. It currently supports A9 - A11 devices running iOS 13 - 15.7.6 . Being deterministic means that this exploit will never panic during or after exploitation and is completely reliable. Trigon exploits an integer overflow in th...