CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk 이 스크립트는 CVE-2022-4510 Binwalk 취약점을 대상으로 하는 익스플로잇을 생성할 수 있게 해줍니다. 익스플로잇은 테스트 및 시연 목적으로 사용할 수 있습니다. 지원되는 옵션에는 SSH, 명령 실행, 리버스 셸이 포함됩니다. 사전 요구 사항 Python 3.x 사용 방법 1. 저장소를 클론하거나 스크립트 파일을 다운로드합니다. 2. 원하는 옵션으로 스크립트를 실행합니다. 사용 가능한 옵션은 다음과 같습니다: ssh: SSH용 익스플로잇을 생성합니다. 인자: file: 입력...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 générateur d'exploit winrar Test POC rapide Générer le POC par défaut pour le test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Personnalisé 1. Placez le fichier appât et le script malveillant dan...

CVE-2023-38831-RaRCE

RaRCE, Générateur d'exploit pour CVE-2023-38831 Il s'agit d'un générateur d'exploit facile à installer et à utiliser, polyvalent, pour CVE-2023-38831, une vulnérabilité qui affecte WinRAR versions antérieures à 6.23. RARLabs WinRAR avant la version 6.23 permet à des attaquants d'exécuter du code...

CSRF-exploit-generator

CSRF-exploit-generator Le générateur d'exploit CSRF permet aux utilisateurs de générer un formulaire d'exploit CSRF avec des paramètres configurables. CSRF-exploit-generator Fonctionnalités Saisie de l'URL cible : Spécifie l'URL à exploiter. Saisie des paramètres POST : Permet d'ajouter des...

CVE-2023-38831-winrar-exploit

Генератор эксплойтов CVE-2023-38831 для WinRAR Быстрая проверка PoC Сгенерируйте PoC по умолчанию для проверки root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Свой вариант 1. Поместите файл-приманку и вредоносный...

📄 Keras 3.13.0 HDF5 Shape Bomb Denial of Service

This script is a security research tool demonstrating a denial of service vulnerability in Keras model loading through malicious HDF5 shape bombs. It generates .keras model archives containing artificially declared extremely large tensor shapes designed to force excessive memory allocation during...

Exploit for CVE-2026-3462

CVE-2026-3462 Acrobat Reader | Improperly Controlled Modifica...

CORScanner

CORS Exploiter Automated CORS misconfiguration scanner with...

AI Agent Smart Contract Exploit Generation

We present A1, an agentic execution driven system that transforms any LLM into an end-to-end exploit generator. A1 has no hand-crafted heuristics and provides the agent with six domain-specific tools that enable autonomous vulnerability discovery. The agent can flexibly leverage these tools to...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831 - WinRAR File Extension Spoofing Vulnerability...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

RaRCE, Exploit generator for CVE-2023-38831 !Contributors...

nipper-ng 0.11.10 - Remote Buffer Overflow Exploit

Exploit Title: nipper-ng 0.11.10 - Remote Buffer Overflow PoC Exploit Author: Guy Levin https://blog.vastart.dev Vendor Homepage: https://tools.kali.org/reporting-tools/nipper-ng Software Link: https://code.google.com/archive/p/nipper-ng/source/default/source Version: 0.11.10 Tested on: Debian CV...

Metaphor - Stagefright with ASLR bypass

Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Metaphor's source code is now released! The source include a PoC that generates MP4 exploits in real-time and bypassing ASLR...

Google Android 5.0.1 - Metaphor Stagefright (ASLR Bypass)

Google Android 5.0.1 - Metaphor Stagefright ASLR Bypass Source: https://github.com/NorthBit/Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter:...

CoreGraphics Information Disclosure - CVE-2014-4378

This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...

SPIP 2.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/53983/info SPIP is prone to multiple unspecified cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Microsoft Windows - Animated Cursor '.ani' Universal Generator

-------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz 2: Jamikazu, Skylined pretty good t-short on BH07 Europe -...

MS Windows Metafile (WMF) Remote File Download Exploit Generator

No description provided by source. / \ / WMF nDay download Exploit Generator \ by Unl0ck Research Team / \ / greetz: rst/ghc ed, uf0, fost , uKt choix, nekd0, payhash, antq , blacksecurity black , 0x557 kaka, swan, sam, nolife , sowhat, tty64 izik ; This sploit is now full shit, so... kiddies par...

MS Windows Metafile (WMF) Remote File Download Exploit Generator

Exploit for unknown platform in category remote exploits ================================================================ MS Windows Metafile WMF Remote File Download Exploit Generator ================================================================ / \ / WMF nDay download Exploit Generator \ by...