docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh ./scripts/deploy.sh to close the...

e1000_vulnerability_exploit

e1000vulnerabilityexploit Installation $ ./install.sh Only own version build are supported yet. Please choose own and debug to build your debug version. Warning : During the process an error can occur, especially during the sources compilation. You can have something like "Exit with error status...

CVE-2026-87491-and-CVE-2026-85046-the-bagel-fell-off-the-counter

CVE-2026-85046 + CVE-2026-87491 Was doing a ton of reading over at https://github.com/Serotav/Writeups. Decided to combine 85046 with 87491 and bake in some WASM at the same time. Went and re-did a stage1.js for an eventual ubuntu LPE I'm cooking. The basics: Confuse packed object and integer...

CVE-2021-26086

CVE-2021-26084 this is a script written in golang to exploit Confluence OGNL Injection CVE-2021-26084. git clone https://github.com/march0s1as/CVE-2021-26084/ cd CVE-2021-26084 go get -v github.com/fatih/color go build post.go ./post.go -h...

autoscan

autoscan.sh Overview autoscan.sh is fully automated penetration test tool linked with Metasploit, nmap and other free avialable tools and report all of this in faraday faraday is one tool, you can use it for other open source reporting tools, an example is to export it in jira. Autoscan identifie...

easy-exploits

easy-exploits The current repository contains exploits of different CVE IDs that were identified in the past by me CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451,...

flash-exploit-defense-system

flash-exploit-defense-system Comprehensive multi-layer defense system against Adobe Flash CVE exploits CVE-2012-0754, CVE-2015-xxxx, CVE-2016-xxxx, CVE-2018-xxxx with browser, mobile, server, and system-level protection...

CVE-2019-0708-Exploit

CVE-2019-0708-Exploit Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Escalation Vulnerability Research and PoC/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64‑based Systems Windows 10 Version 20H2 fo...

xortigate-cve-2023-27997

xortigate-cve-2023-27997 Exploit for xortigate CVE-2023-27997. It is not usable "as-is" and serves educational purposes. Information Please refer to the blogpost for additional details. This is a POC that demonstrates the bug, nothing more. Example...

Moodle-CVE-2018-1042

Moodle CVE-2018-1042 Script to exploit CVE-2018-1042 in order to do internal port scans...

CVE-2024-36877

CVE-2024-36877 Exploit POC for CVE-2024-36877 Detailed write-up can be found on my blog - https://jjensn.com/at-home-in-your-firmware https://github.com/user-attachments/assets/71f30cda-61e3-49ea-b856-959746349f2d...

CGIShell

CGIShell shellshock CVE-2014-6271 CGI Exploit Use like OpenSSH via CGI Page Use python cgishell.py 'http://www.google.com/cve-2014-6271/poc.cgi' Screenshot Dependence Windows needed pyreadline It is not needed chardet Future Add TestCase HTTP Login Support http transmission gzip compression chard...

OAMBuster

OAMBuster Multithreaded Padding Oracle Attack on Oracle OAM CVE-2018-2879 Authors Red Timmy Marco Ortisi, Stefan Broeder, Ahmad Mahfouz Description This multithreaded exploit was developed to greatly increase the speed of the attack as compared to the single threaded version. For more information...

CVE-2021-30481

CVE-2021-30481 CVE details: https://nvd.nist.gov/vuln/detail/CVE-2021-30481 Exploit code depends on SteamworksPy...

CVE-2014-3153

Towelroot for Ubuntu x86 This exp has been tested on ubuntu 14.04 x86 and ubuntu 12.04.2 x86 successfully. Learning CVE2014-3153 and towelroot. Kernel through version 3.14, use rbtree to store rtwaiternot plistnode, more complex! IA have diffrent threadinfo with ARM!! Source from geekben/towelroo...

Laravel_CVE-2021-3129_EXP

LaravelCVE-2021-3129EXP Reference exp: https://github.com/SNCKER/CVE-2021-3129 Version Requirements Laravel Iginition == 2.5.1 Local version of EXP: Laravel 8.4.2 Notes You need to place this exp in the phpgcc directory, otherwise phpgcc cannot be called. example...

RIPPL

RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...

CVE-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami Android TV 8.0 - ARM32 Cortex A9 By Polo35 - 2020/08/24 "Usage: python poloexploit.py targetbtmac targetadbip, shellcommand, disablereboot, verbose" Based on scripts by Jan Ruge CVE-2020-0022 an Android 8.0-9.0 Bluetooth Zero-Click R...