29 matches found
security-research
security-research Personal CVE PoC repository — exploit scrip...
cyber-punk
Cyber Punk Security Vulnerability Scanner A Claude Code plu...
Exploits-and-code-snippets
Exploits-and-code-snipp...
Exploits-and-code-snippets
Exploits-and-code-snipp...
📄 libtransmission 2.93 Integer Overflow
libtransmission versions 2.93 and below suffer from multiple integer overflows. A remote attacker could create a specially crafted .torrent file which may be small when compressed that exploits these overflows when a victim loads it via Transmission or its command-line interface transmission-cli...
demo_web_attacks
demowebatta...
Exploit for CVE-2024-28397
CVE-2024-28397 js2py Sandbox Escape Exploit A collection of e...
Exploit for CVE-2025-27581
CVE-2025-27581 Exploit scripts for CVE-2025-27581 BasicExplo...
shellshocker-pocs
This repository contains a collection of Proof of Concepts PoCs and potential targets for the Shellshock vulnerability, also known as Bash Bug. The vulnerability affects the Bash shell and allows an attacker to execute arbitrary code by injecting malicious environment variables. The repository...
渗透字典
This repository is an offensive tool for Bug Bounty research and exploitation. The primary CVE ID is not explicitly mentioned, but it appears to be a collection of exploits and techniques for various vulnerabilities. The repository contains a wide range of exploits and techniques, including: 1...
Exploit for Server-Side Request Forgery in Grafana
This is a PoC Proof of Concept repository for various web vulnerabilities, specifically SQL injection and SSRF Server-Side Request Forgery vulnerabilities. The repository contains a list of vulnerabilities, including: CVE-2021-21315: Node.js command injection vulnerability CVE-2020-13379: Grafana...
Exploit for Improper Input Validation in Realtek Ecos_Rsdk_Firmware
CVE-2022-27255 - Realtek eCos SDK SIP ALG buffer overflow Th...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Article Journal: https://www.researchgate.net/publication/373214...
Exploit for Improper Encoding or Escaping of Output in F5 Nginx
This is an open-source project for vulnerability research and training, called Vulhub. It is a collection of vulnerable systems and applications, designed to help security researchers and students learn about various types of vulnerabilities and how to exploit them. The project is maintained by...
vulhub
This repository is an open-source collection of pre-built vulnerable docker environments, known as Vulhub. It is an offensive tool for various areas, including web application security, penetration testing, and vulnerability research. The primary purpose of Vulhub is to provide a convenient and...
Exploit for SQL Injection in Zabbix
This repository is an open-source collection of pre-built vulnerable docker environments, referred to as 'Vulhub'. It is an offensive tool for web application security testing and vulnerability research. The primary purpose of Vulhub is to provide a simple and convenient way to test and demonstra...
MS17-010
This repository is for public analysis of the MS17-010 vulnerability. The repository contains various proof-of-concept PoC exploits and scripts for exploiting the vulnerability, which affects the Windows SMB protocol. The exploits are designed to demonstrate the vulnerability's impact and are not...
icsmaster
This repository is an offensive tool for ICS Industrial Control Systems security research. It contains a collection of resources, including papers, exploits, firmware, Nmap scripts, and tools, related to ICS security. The repository is organized into several sections, including a directory of...
pwn-collection
This repository contains a collection of CTF Capture The Flag challenges with writeups and exploit scripts. The challenges are categorized into three main areas: fmtstr32, heapchunkoverlap64, and pwn300. The fmtstr32 category contains challenges related to format string vulnerabilities, which all...