232323 matches found
CVE-2024-22274
CVE-2024-22274 Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123" then spawn ssh with root shell. Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64...
Clickjacking-Exploit-Detector
Clickjacking-Exploit-Detector The Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements. Features HTML Scanning: Checks HTML elements and iframe elements that can be exploited for clickjacking. Warning of...
CVE-2014-6271
CVE-2014-6271 - Shellshock.py Shellshock exploit aka CVE-2014-6271. Tested on Bash 3.2 and Bash 4.2. For more information about the vulnerability visit : https://nvd.nist.gov/vuln/detail/CVE-2014-6271 Note The exploit was mainly tested on Hack The Box in the following boxes: Beep box :...
msfconsole-termux
msfconsole-termux How To Install Metasploit-Table on the Android Termux pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP msfconsole -q -x "use...
CVE-2023-22518
CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: python3 exploit.py -h usage: exploit.py...
hook
hook PoC Exploit for CVE-2024-32002...
CVE-2022-37706
Description Taken from https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706. Worked on: Distributor ID: Ubuntu Description: Ubuntu 20.04.6 LTS Release: 20.04 Codename: focal USAGE 1. Copy/Upload the exploit to the vulnerable machine. 2. Issue the command bash ./exploit.sh...
cve-2017-9805.py
CVE-2017-9805.py 1. Better Exploit Code For CVE 2017 9805 apache struts 2. Should be mostly error proof Why Recode? Found that most of the exploit code online simply used string concatenation to insert user supplied commands and insert into an XML string. This isnt very reliable as XML requires...
Dirty-Cow-CVE-2016-5195-
Dirty-Cow-CVE-2016-5195- This is a Dirty Cow CVE-2016-5195 privilege escalation vulnerability exploit...
CVE-2023-32364-macos-app-sandbox-escape
CVE-2023-32364-macos-app-sandbox-escape Exploit for CVE-2023-32364...
CVE-2023-22515
CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...
CVE-2022-25636-PipeVersion
CVE-2022-25636 pipe version Using pipe-primitive to exploit CVE-2022-25636, so no kaslr leak nor smap smep ktpi bypass is needed : Q: What is pipe-primitive? A: https://github.com/veritas501/pipe-primitive...
CVE-2022-1388
Old exploit I forgot to publish...
CVE-2025-31161_exploit
CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...
CVE-2022-36804-PoC-Exploit
CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with this exploit. Note: this exploit includes automatic repo detection which ...
killosx
killosx Use Apple CoreText exploit CVE-2012-3716 and launch an AP to affect all vulnerable Apple devices within wifi range. Installation: Run 'make install' in the killosx directory. killosx can now be run from anywhere with 'killosx'. Usage: killOSX Usage - killosx -i wlan0 Run exploit on wlan0...
CVE-2019-8014
CVE-2019-8014 的一点简单分析。 包含 Poc 和 exp Shellcode 是弹出计算器 or CMD 窗口，不记得了。 注意： my.7z 是触发漏洞需要的 bmp 图片 ，文件太大了，我压缩了一下。...
CVE-2024-32002
CVE-2024-32002 PoC Exploit for CVE-2024-32002...
veneficus-implant-public
Veneficus Mini - Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Full kill-chain malware 0day: Exploit, LPE, Pivot, C2, Persistence Public technical outline · pseudo-code only · not executable abraxaslabs.tech · @abraxasnull Veneficus Mini is Full kill-chain malware 0day:...