Exploits

This repository contains a personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits. Some of these CVE have been joined together in exploit chains for RCE, sandbox escapes and privilege...

pentaho-exploits

Exploits relating to https://research.aurainfosec.io/pentest/pentah0wnage Note: Some things might not work Thanks to my employer Aura Information Security for providing time for me to work on this project...

team-teso

team-teso The TESO-CVS was giften to THC at THC's 10th anniversary party in 2005 Berlin. It is published here for educational purposes only. ENJOY. Some artifacts were never hosted on the CVS and are lost in time: TESO's ssh exploit Many ohh so many! OpenBSD exploits including the world's first...

joomla_exploits

Joomla Exploits This repository contains selected Joomla exploit artifacts validated against real Docker Joomla environments. The collection is split by practical offensive utility. real-impact Exploits with direct security impact: RCE, file upload to code execution, SQL injection, sensitive...

Windows10Exploits

Windows10Exploits Download a single CVE The variable is only for example ; you can make your own SVN script for downloading a single folder = CVE = BR @nu11secur1ty $CVE = CVE-2018-0833 svn checkout https://github.com/nu11secur1ty/Windows10Exploits/trunk/Undefined/$CVE Link table of Analysis...

prestashop-exploits

prestashop-exploits Collection of exploits/POCs for PrestaShop cookie vulnerabilities CVE-2018-13784 Refer to https://ambionics.io/blog/prestashop-privilege-escalation for details...

Hvv2023

Hvv2023 All POCs are from the internet...

WHP

M$ Windows Hacking Pack Tools here are from different sources. The repo is generally licensed with WTFPL, but some content may be not eg. sysinternals. "pes" means "PE Scambled". It's useful sometimes. Remote Exploits Windows 2000 / XP SP1 MS05-039 Microsoft Plug and Play Service Overflow, Works...

My-PoC-Exploits

My-PoC-Exploits PoC exploits I wrote. They're as is and I will not offer support...

Exploits

A collection of exploits developed by @xer0dayz @Sn1perSecurity https://sn1persecurity.com Vulnserver.exe GMON SEH Overflow Exploit FreeFloat FTP Server HOST Buffer Overflow ASLR Bypass CoolPlayer+ Portable 2.19.6 Stack Overflow ASLR Bypass HTTPoxy Exploit/PoC Scanner Ability FTP 2.34 Buffer...

inteno-exploits

Pruebas de concepto y exploits para dispositivos IOPSYS Esta es una colección de scripts que abusan de diversas vulnerabilidades en dispositivos que ejecutan IOPSYS de Inteno. Más detalles sobre cada vulnerabilidad se pueden encontrar en mi blog. Estos scripts solo se han probado en Linux, pero...

SecBugs

Security Bugs Full disclosures for CVE ids, proofs of concept, exploits, 0day bugs and so on...

WindowsElevation

What's this This project is mainly used to collect the commonly used exp of Windows platform and give the relevant repair scheme. On the one hand, it is helpful for security researchers to quickly complete the right raising in the process of penetration testing, on the other hand, it is also...

easy-exploits

easy-exploits The current repository contains exploits of different CVE IDs that were identified in the past by me CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451,...

kernel-exploit-factory

kernel-exploit-factory Keep updating...... Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. This repository is to extract all Linux kernel exploit and relative debug environment. You can use Qem...

0day

0day For reasons known to us, the original repository was deleted, but local repo were kept, forks and stars cleared But rest assured, it's still the original recipe, the original taste. In case of this issue,please Follow Me Education use only 中文 | English EXP, POC of various CMS, platforms,...

cve

CVE PoC Casi todos los PoC de CVEs disponibles públicamente. CVEs más populares actualmente Título| URL ---|--- CVE-2022-0001| /trickest/cve/blob/main/2022/CVE-2022-0001.md CVE-2022-25297| /trickest/cve/blob/main/2022/CVE-2022-25297.md CVE-2022-1388| /trickest/cve/blob/main/2022/CVE-2022-1388.md...

Concierge

Concierge Toolkit: Physical Access Control Identification and Exploitation The Concierge Toolkit is collection of various scripts and resources to aid the in identification and exploitation of physical access control and monitoring systems. Concierge currently contains tests and/or exploits for t...

exp_hub

0x01 Note This project is only for legal penetration testing and enthusiast reference learning. Please comply with the "Cybersecurity Law of the People's Republic of China" and corresponding local laws. It is prohibited to use this project for illegal operations, otherwise you will bear the...

exploits

exploits This repository contains all of the shellcode or exploits I submitted to https://www.exploit-db.com/. All exploits listed here are not 0day, all software talked about have a fix available. Please note that the exploits are either for your own curiosity on your own machines, or to check...