232322 matches found
CVE-2022-21587-POC
CVE-2022-21587-POC- CVE-2022-21587 POC file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit cd slipit python3 setup.py sdist pip3 install --user dis...
CVE-2023-24955-PoC
CVE-2023-24955-PoC Exploit for Microsoft SharePoint 2019 An exploit published for a vulnerability named CVE-2023-24955 .I saw the code and There was some bug in the resolveTargetInfo and getOAuthInfo . Then I fixed it and it's for u now. ❗❗❗❗❗❗ Remember that you should run it with Python2 I tried...
libmsm_vfe_read_exploit
Read kernel mermory with CVE-2014-4321...
CVE-2024-22274
CVE-2024-22274 Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123" then spawn ssh with root shell. Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64...
Clickjacking-Exploit-Detector
Clickjacking-Exploit-Detector The Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements. Features HTML Scanning: Checks HTML elements and iframe elements that can be exploited for clickjacking. Warning of...
CVE-2014-6271
CVE-2014-6271 - Shellshock.py Shellshock exploit aka CVE-2014-6271. Tested on Bash 3.2 and Bash 4.2. For more information about the vulnerability visit : https://nvd.nist.gov/vuln/detail/CVE-2014-6271 Note The exploit was mainly tested on Hack The Box in the following boxes: Beep box :...
msfconsole-termux
msfconsole-termux How To Install Metasploit-Table on the Android Termux pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP msfconsole -q -x "use...
CVE-2023-22518
CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: python3 exploit.py -h usage: exploit.py...
hook
hook PoC Exploit for CVE-2024-32002...
CVE-2022-37706
Description Taken from https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706. Worked on: Distributor ID: Ubuntu Description: Ubuntu 20.04.6 LTS Release: 20.04 Codename: focal USAGE 1. Copy/Upload the exploit to the vulnerable machine. 2. Issue the command bash ./exploit.sh...
cve-2017-9805.py
CVE-2017-9805.py 1. Better Exploit Code For CVE 2017 9805 apache struts 2. Should be mostly error proof Why Recode? Found that most of the exploit code online simply used string concatenation to insert user supplied commands and insert into an XML string. This isnt very reliable as XML requires...
Dirty-Cow-CVE-2016-5195-
Dirty-Cow-CVE-2016-5195- This is a Dirty Cow CVE-2016-5195 privilege escalation vulnerability exploit...
CVE-2023-32364-macos-app-sandbox-escape
CVE-2023-32364-macos-app-sandbox-escape Exploit for CVE-2023-32364...
CVE-2023-22515
CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...
CVE-2022-25636-PipeVersion
CVE-2022-25636 pipe version Using pipe-primitive to exploit CVE-2022-25636, so no kaslr leak nor smap smep ktpi bypass is needed : Q: What is pipe-primitive? A: https://github.com/veritas501/pipe-primitive...
CVE-2022-1388
Old exploit I forgot to publish...
CVE-2025-31161_exploit
CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...
CVE-2022-36804-PoC-Exploit
CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with this exploit. Note: this exploit includes automatic repo detection which ...
killosx
killosx Use Apple CoreText exploit CVE-2012-3716 and launch an AP to affect all vulnerable Apple devices within wifi range. Installation: Run 'make install' in the killosx directory. killosx can now be run from anywhere with 'killosx'. Usage: killOSX Usage - killosx -i wlan0 Run exploit on wlan0...