CVE-2026-57858

CVE-2026-57858 Wormable exploit for CVE-2026-57858...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

CVE-2015-6576

CVE-2015-6576 A PoC for the Bamboo deserialization exploit...

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST Authentication Bypass Vulnerability Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Usage python3 CVE-2022-1388.py -u http://127.0.0.1 python3...

CVE-2023-21554

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC， The sign of Poc success is the crash of the mqsvc.exe process, and there is no pop-up message, which needs to be seen in a process monitor-like program Execute command in windows terminal or command prompt python poc.py Enter IP addres...

CVE-2018-14667

CVE-2018-14667 detail:https://xz.aliyun.com/t/3264 poc calcwindows：...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

cve-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...

cve-2016-0728

cve-2016-0728 Exploit and checker...

CVE-2014-6287

Poc exploitbash script bash.webm About the exploit You can get reverse shell with .sh file in Linux You can get reverse shell with .py file in Windows and Linux in windows, you need to install netcat You must specify the url example: http://target.com/ using for .py: python exploit.py using for...

CVE-2018-15745

Argus Surveillance DVR 4.0.0.0 - Directory Traversal Disclaimer This code is provided for educational and research purposes only. The author is not responsible for any misuse or damage caused by this code. You are responsible for ensuring that you have proper authorization before testing systems...

CVE-2022-22965

👾 CVE-2022-22965 This is a proof of concept of an exploit for CVE-2022-22965 spring4shell vulnerability. It is composed by: A vulnerable Springboot application; An exploit script written in python; A safe app for test that the exploit doesn't work; A dockerfile for running the vulnerable...

cve-2022-4543-wrapper

cve-2022-4543-wrapper Introduction This is a wrapper of willsroot's CVE-2022-4543 exploit to help you judge and get kernel base address. How to use Compile Base on your demandOptional: gcc dekaslr.c --static -o dekaslr g++ main.cpp --static -o main For some OS, install static libc first. De-KASLR...

exploit-writing-for-oswe

Exploit Writing for OSWE Background What This repository contains a list of useful snippets and tips that pertain to the writing of exploit scripts in the OSWE labs and certification exam. Some examples here may go against certain coding practices, but our end goal is to write the exploit script...

area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return. Getting started · Playbooks · CLI · Architecture ·...

PPLmedic

PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...

exploits

Public Proof-of-Concept Exploits Repository This repository contains public proof-of-concept PoC exploits for various vulnerabilities that I have discovered over time. These PoC exploits are shared for educational purposes and to demonstrate the potential risks associated with the vulnerabilities...

OffensiveCpp

OffensiveCpp Offensive C++ is a collection of offensive security snippets written in C++. It includes various tools for penetration testing and exploit development. Table of Contents OffensiveCpp Introduction Why C/C++? Compiling Reference Libraries Contributing License Introduction The purpose o...

CMS-made-simple-sqli-python3

CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - SQL Injection rewritten for python3, CVE-2019-9053 I found it problematic to run this exploit on kali linux, since python2 doesn't have termcolor, so with very few brackets I made it working with python3. All credit goes to:...

ConPresentations

ConPresentations Micellaneous slide decks, resources, and recordings of some of my conference presentations. Conference Presentations BSidesCanberra 2023 Keynote: "When Exploits Aren't Binary" Slides OffensiveCon 2023: "The Print Spooler Bug That Wasn't" with James Forshaw Slides Video Zer0Con...