CVE-2016-5195

CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt References https://github.com/FireFart/dirtycow/blob/master/dirty.c...

brutus

The Brutus Exploitation Framework An educational exploitation framework shipped on a modular and highly extensible multi-tasking and multi-processing architecture. Table of Contents Introduction Demos Installation Usage Features Documentation MAC Address Management ARP Network Scanner ARP Spoofin...

SharpShares

SharpShares Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbo...

redisHack

redisHack Redis unauthorized access detection and CVE-2022-0543 exploitation two-in-one script Usage:...

CVE-2025-55315-PoC-Exploit

CVE-2025-55315 Pentest Tool HTTP Request Smuggling Exploitation Tool for ASP.NET Core Kestrel ⚠️ LEGAL WARNING THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY! Use ONLY on systems you own or have explicit written authorization to test Unauthorized access to computer systems is ILLEGAL Tool...

LogHound

LogHound Post-Exploitation EVTX Analyzer for BloodHound Mapping LogHound collects and parses Windows Security Event Logs .evtx to extract authentication events, session data, and logon metadata for ingestion into BloodHound and for deeper adversarial telemetry. Reasoning & Overview LogHound was...

PickleC2

PickleC2 PickleC2 is a post-exploitation and lateral movements framework Documentation ReadTheDocs Overview PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. PickleC2 has the ability to import your own PowerShe...

Nginx_cve-2026-42945-scanner-gui

Ngxin cve-2026-42945-scanner-gui a need run jdk21version java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation Requires JDK 21 to run After extraction, java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation...

CVE-2025-4664

🔒 Vulnerability CVE-2025-4664 The CVE-2025-4664 vulnerability is a high-severity security flaw identified in the Loader component of Google Chrome, present in versions prior to 136.0.7103.113. This issue allows a remote attacker to leak cross-origin data via a specially crafted HTML page,...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Bash script that allows identifying and/or exploiting the Log4Shell vulnerability remotely. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of...

CVE-2021-34527-1675

CVE-2021-34527-1675 Cve-2021-1675 or cve-2021-34527? Detailed analysis and exploitation of windows print spooler 0day vulnerability！！！...

routersploit

RouterSploit - Framework de Explotación para Dispositivos Embebidos Comunidad Únete a la comunidad en Discord de Explotación Embebida. Descripción El Framework RouterSploit es un framework de explotación de código abierto dedicado a dispositivos embebidos. Consiste en varios módulos que ayudan en...

VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

CVE-2022-39197

CVE-2022-39197 RCE POC Usage Prepare Payload 1. Edit Line 19 with your payload in EvilJar/src/main/java/Exploit.java 2. Build using jar mvn clean compile assembly:single 3. Move EvilJar-1.0-jar-with-dependencies.jar from EvilJar/target/ to serve/ folder 4. Edit serve\evil.svg replace attacker 5...

RF-CHAOS

RF CHAOS - Chaos via BLE / BT / WiFi / NFC / Etc via Android Phones RF CHAOS is an Android-Native WiFi, Bluetooth, BLE, and NFC scanner, logger, and explotation tool. Created ByScramblr AKA @notdan AKA alotofnamesyoudontknow ℹ️ If you're itching to get the APK now, compiled releases are...

XXRF-Shots

What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability that enables attackers to send specially crafted requests through a vulnerable web application. With this technique, attackers can gain unauthorized access to internal resources behind a firewall, which would...

FruityC2

FruityC2 This is the initial release for FruityC2 alpha version. Can be installed on any linux system, but the installation scripts are made for Debian based systems. There are a lot of functionalities that will be include in future releases, and probably a lot of code will be changed, but this...

ibombshell

ibombshell - Dynamic Remote Shell ,--.!, / -- / / / // / / / / ,d08b. '| / / / / / \ / / / / / 0088MM / / // / // / / / / / / // // / / / / / / / 9MMP' ///// // //./// ///// + Starting the console... Console ready! ibombshell is a tool written in Powershell that allows you to have a prompt...

CVE-2025-3248-POC

CVE-2025-3248-POC POC of CVE-2025-3248 execute any command on target machine usage: python poc.py 'http://xxx.com' 'ls /' leave some love on victims' computers poc.py...

CVE-2017-17562

CVE-2017-17562 RCE GoAhead web server 2.5 3.6.5 Standalone Python 3 reverse shell exploit for CVE-2017-17562, works on GoAhead web server versions 2.5 3.6.5. Blog article here. Written and tested on Python 3.7 based on POC and vulnerable environment here. Some code borrowed from the Metasploit...