37 matches found
CVEsLab
CVEsLab A collection of proof-of-concept exploit scripts, docker lab environments, and Securi Trust Team-discovered vulnerabilities for written by the team at Securi Trust for various CVEs...
CVE-2022-1388-Exploit
CVE-2022-1388-Exploit Test and Exploit Scripts for CVE 2022-1388 F5 Big-IP masscheck.py will take a file input and check the hosts are vulnerable without exploiting them. Detection: Scanning for /mgmt/tm/util/bash as an endpoint, likely to be in web server logs. Or if you have a F5 go patch it, t...
Ubiquiti-CVE
Ubiquiti-CVE ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -...
dahua-cve-research
Dahua IP Camera CVE Exploit Tools ⚠️ UNDER DEVELOPMENT — These scripts are based on published CVE details and require further testing against vulnerable devices to confirm full functionality. Research and proof-of-concept scripts for four critical Dahua IP camera vulnerabilities. ⚠️ LEGAL...
CVE-2024-31317-PoC
CVE-2024-31317 Proof of Concept This repository contains a collection of Proof of Concept scripts for the CVE-2024-31317 vulnerability in Android systems. Script Description CVE-2024-31317-android11-.sh: Exploit script for Android 11- devices. CVE-2024-31317-android12.sh: Exploit script for Andro...
CVE-Project
CVE-Project CISA KEV vulnerability PoC collection — 393 CVEs...
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder...
CTFs
CTF Writeups and Exploits This repository collects CTF challe...
security-research
security-research Personal CVE PoC repository — exploit scrip...
cyber-punk
Cyber Punk Security Vulnerability Scanner A Claude Code plu...
Exploits-and-code-snippets
Exploits-and-code-snipp...
Exploits-and-code-snippets
Exploits-and-code-snipp...
📄 libtransmission 2.93 Integer Overflow
libtransmission versions 2.93 and below suffer from multiple integer overflows. A remote attacker could create a specially crafted .torrent file which may be small when compressed that exploits these overflows when a victim loads it via Transmission or its command-line interface transmission-cli...
demo_web_attacks
demowebatta...
Exploit for CVE-2024-28397
CVE-2024-28397 js2py Sandbox Escape Exploit A collection of e...
Exploit for CVE-2025-27581
CVE-2025-27581 Exploit scripts for CVE-2025-27581 BasicExplo...
shellshocker-pocs
This repository contains a collection of Proof of Concepts PoCs and potential targets for the Shellshock vulnerability, also known as Bash Bug. The vulnerability affects the Bash shell and allows an attacker to execute arbitrary code by injecting malicious environment variables. The repository...
渗透字典
This repository is an offensive tool for Bug Bounty research and exploitation. The primary CVE ID is not explicitly mentioned, but it appears to be a collection of exploits and techniques for various vulnerabilities. The repository contains a wide range of exploits and techniques, including: 1...
Exploit for Server-Side Request Forgery in Grafana
This is a PoC Proof of Concept repository for various web vulnerabilities, specifically SQL injection and SSRF Server-Side Request Forgery vulnerabilities. The repository contains a list of vulnerabilities, including: CVE-2021-21315: Node.js command injection vulnerability CVE-2020-13379: Grafana...