389 matches found
CVE-2023-1545
CVE-2023-1545 Simple SQL Injection Python script for Teampass prior to versions 3.0.0.23, leveraging CVE-2023-1545. More information on this blog. Usage Just use set the URL where Teampass is running as unique argument: python3 CVE-2023-1545.py http://example.com:8080 Discliamer Use it for ethica...
CVE-2019-9978-Python3
CVE-2019-9978-Python3 python3 version of the CVE-2019-9978 exploit To Do http server 2024 update this might still be a good programming challenge not sure what htb/thm machine will apply for testing...
strapi_cms_3.0.0-beta.17.7
Strapi CMS CVE-2019-18818 and 19606 Blind Remote Code Execution of Strapi CMS Version 3.0.0-beta.17.7 and earlier to get reverse shell Getting Started Executing program Using python3 python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0.1 -lport 9001...
bazad5
bazad5 Local privilege escalation for OS X 10.10.5 via CVE-2016-1828...
CVE-2021-3156-Exp
CVE-2021-3156-Exp The exploit of CVE-2021-3156. After an overnight researching, finally, I got it! Thanks https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt...
jankybank
jankybank Inspired by and largely borrowed from kozmer/log4j-shell-poc Works with eurogig/log4sheller Use to create a CTF based on Log4j...
CVE-2024-4701-POC
CVE-2024-4701 https://nvd.nist.gov/vuln/detail/CVE-2024-4701 docker-compose up python3 ex.py...
CVE-2018-14714-POC
CVE-2018-14714-POC Repository moved here:https://github.com/sunn1day/CVE-2018-14714-POC...
CVE-2024-35250-BOF
CVE-2024-35250-BOF Beacon Object File BOF implementation for CVE-2024-35250. Build The project template is from bof-vs. Compile using the Release configuration in Visual Studio 2019/2022. Credits https://github.com/varwara/CVE-2024-35250...
CVE-2026-41940-Linux
CVE-2026-41940 — WHM/cPanel Exploit Tool Linux ⚠️ DISCLAIMER: This tool is intended for authorized penetration testing and educational purposes only. Using this tool against systems without explicit written permission is illegal. The developers are not responsible for any misuse or damage caused. ...
CVE-2026-41940
CVE-2026-41940 - cPanel/WHM Auth Bypass Scanner & Exploit Tool cPanel/WHM Authentication Bypass Scanner & Exploit Tool for CVE-2026-41940 ⚠️ Disclaimer This tool is provided for educational purposes and authorized security testing only. By using this tool, you agree that: You will only test system...
CVE-2026-31635
CVE-2026-31635 Exploit for DirtyDecrypt - CVE-2026-31635 Local Privilege Escalation...
struts-pwn
struts-pwn Un exploit para Apache Struts CVE-2017-5638 Uso Probando una sola URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Probando una lista de URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Comprobando si la vulnerabilidad existe en una sola UR...
poc-cve-2021-4034
poc-cve-2021-4034 PoC für CVE-2021-4034, auch pwnkit genannt Verwendung Führe einfach make make aus und prüfe dann den Release-Ordner, oder wenn du die Einzeiler-Variante bevorzugst sh -c "$curl -sSL https://github.com/dzonerzy/poc-cve-2021-4034/releases/download/v0.2/run-exploit.sh" Viel Spaß...
telnetd-cve-2026-24061
Youtube Thanks for the python exploit...
CVE-2022-0543
CVE-2022-0543 适用于通过Lua沙盒逃逸漏洞进行Redis RCE的完整利用程序。基于 https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/。 功能: 自动反向Shell -I + -P 单条命令执行 -x 基本Shell 默认 待办: 需要更好的检测机制以防止误报 免责声明: 此脚本用于审计系统安全性。请仅在您自己的系统或已获得书面授权利用的系统上使用此脚本。...
React-2-Shell
This is a security exploit tool targeting CVE-2025-55182. It exploits a Remote Code Execution RCE vulnerability in React Server Components 🔥 CVE-2025-55182 Background CVE-2025-55182 also widely referred to as “React2Shell” is a critical remote code execution RCE vulnerability found in React Serve...
CVE-Exploit-Research-Development
🔐 Herramienta de Explotación SSH Solo para Uso Educativo 📌 Descripción Esta herramienta demuestra la explotación de: CVE-2008-0166 CVE-2008-1657 Se conecta a servicios SSH vulnerables y proporciona: Shell interactivo persistente Registro de ejecución de comandos Generación automática de informes...