67653 matches found
Log4jPatcher
Log4jPatcher A Java Agent based mitigation for Log4j2 JNDI exploits. This agent employs 2 patches: Disabling all Lookup conversions on supported Log4j versions in org.apache.logging.log4j.core.pattern.MessagePatternConverter by setting noLookups to true in the constructor. Disabling the...
CVE-2023-20198
Cisco Router CVE-2023-20198 Exploitation Tool...
CVE-2026-49104-
CVE-2026-49104- CVE-2026-49104 Integration for Keap/Infusionsoft PHP Object Injection Exploit...
EvilDroid
EvilDroid: Automated Exploit for CVE-2024-0044 EvilDroid is a sophisticated tool designed for automated exploitation of CVE-2024-0044 vulnerabilities. This script streamlines the process of exploiting vulnerable Android applications by automating the payload deployment and APK installation...
CVE-2024-10914
CVE-2024-10914 A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads t...
Exploit-Development
Developed Exploits This repository will contain any exploit or proof of concept code I release publicly. In addition to this, I will include Metasploit Modules, and ported exploits. Metasploit Modules This directory will contain all Metasploit modules I've developed. Note that code within this...
CVE-2025-2304
CVE-2025-2304 - Camaleon CMS Privilege Escalation This repository contains a Python script that automates the exploitation of the CVE-2025-2304 privilege escalation vulnerability in Camaleon CMS. It has been tested on version 2.9.0. Usage python exp.py http://target.exmaple user password123 Links...
CVE-2025-0282-Full-version
Storks: Remote Code Execution Vulnerability Exploitation Tool Overview Storks is a Python-based Proof-of-Concept PoC tool designed to demonstrate a critical Remote Code Execution RCE vulnerability, identified as CVE-2025-0282 , in a specific network appliance. This vulnerability can be exploited ...
CVE-2007-2447
CVE-2007-2447 CVE-2007-2447 - Samba usermap script. https://alien0ne.digitalpress.blog/cve-2007-2447/ Usage: $ python3 script.py rhost - The target address rport - The target port lhost - The listener address lport - The listener port Installation: This exploit requires Python 3.7 or higher sudo...
cve-2023-38408
CVE-2023-38408: Understanding and Simulating a Real-World SSH-Agent Vulnerability Table of Contents 1. Introduction 2. Background Concepts 3. The CVE-2023-38408 Vulnerability 4. Practical Simulation and Testing 5. Technical Analysis 6. Fix and Mitigation 7. Conclusion 1. Introduction Purpose of...
cve-2024-23897-jenkins_lfi_reproduction
CVE-2024-23897 — Jenkins CLI Arbitrary File Read Vulnerability CVSS 9.8 CRITICAL — Actively exploited in the wild Overview CVE-2024-23897 is a critical arbitrary file read vulnerability in Jenkins' command-line interface CLI. The Jenkins CLI uses the args4j library for parsing command arguments...
CVE-2021-3129
CVE-2021-3129 Instructions: Note: A local PHP environment is required. python3 CVE-2021-3129.py -u http://127.0.0.1:80 （只检测poc） python3 CVE-2021-3129.py -u http://127.0.0.1:80 -c whoami （命令执行，默认会遍历所有利用链） python3 CVE-2021-3129.py -u http://127.0.0.1:80 -c whoami -chain laravel/rce1 （如检测到可用利用链可直接选择...
VAPT-Report-on-SMB-Exploitation-in-Windows-10-Finance-Endpoint
VAPT Report on SMB Exploitation in Windows 10 Finance Endpoint This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0144 EternalBlue on a Windows 10 machine within a finance-oriented infrastructure. 🔐 Introduction...
autoblue
AUTOBLUE: Automated EternalBlue Exploit Tool AUTOBLUE is an automation tool designed to exploit the EternalBlue vulnerability CVE-2017-0144 on Windows machines. The tool integrates the power of Nmap for vulnerability scanning and Metasploit's msfconsole for exploitation, enabling users to...
CVE-2024-5009
CVE-2024-5009 : WhatsUp Gold SetAdminPassword Privilege Escalation CVEHunter tool for vulnerability detection and exploitation tool for CVE-2024-5009 with Asychronous Performance. Installation git clone https://github.com/th3gokul/CVE-2024-5009.git cd CVE-2024-5009 pip install -r requirements.txt...
CVE-2024-4358
CVE-2024-4358 An Vulnerability detection and Mass Exploitation tool for CVE-2024-4358 Installation: git clone https://github.com/RevoltSecurities/CVE-2024-4358 pip install -r requirements.txt python3 exploit.py --help Usage: python3 exploit.py -h / / / / / / / / | |// // / / / / / / / / / / / /...
CVE-2021-40444_CAB_archives
CVE-2021-40444CABarchives CVE-2021-40444 - Custom CAB templates from MakeCAB Reference ddl https://github.com/Udyz/CVE-2021-40444-CAB/blob/main/calc.dll...
CVE-2022-26134
CVE-2022-26134 Atlassian Confluence Remote Code Execution Vulnerability CVE-2022-26134 Usage: python CVE-2022-26134.py -u http://127.0.0.1 Batch verification: python CVE-2022-26134.py -f xxx.txt copy URL to txt...
android-kernel-exploitation-ashfaq-CVE-2019-2215
android-kernel-exploitation-ashfaq-CVE-2019-2215. कार्यशाला में उपयोगकर्ता रॉबर्ट डैन द्वारा प्रदान की गई Docker छवि android-kernel-exploitation-ashfaq-CVE-2019-2215...