vss-fr2system

vss-fr2system Two small tools that turn an arbitrary file read bug on Windows into a SYSTEM shell. vssfreeze/ — creates a Volume Shadow Copy as a standard user , then holds it open so you have time to read the SAM/SECURITY/SYSTEM hives out of it fr2system/ — takes the hives you copied out, decryp...

CVE-2022-3656

Imperva Red Team recently revealed a vulnerability called CVE-2022-3656 that affects more than 2.5 billion users of Google Chrome and Chromium-based browsers. This vulnerability allows the theft of sensitive files, such as encrypted wallets and cloud provider credentials. Vulnerability...

Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal

CVE-2023-1112 - Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal Info Path Traversal in Drag and Drop Multiple File Uploader PRO - Contact Form 7 version 5.0.6.1 allows unauthenticated remote attacker to upload files anywhere writable on the remote server...

CVE-2024-25600-mass

mass upload shell for cve python3 exploit.py -l yourlist.txt path shell https://examplewebsite.com/asd.php...

CVE-2025-24071

CVE-2025-24071: Microsoft Windows File Explorer Spoofing Vulnerability script by SilentExploit 📖 Description This project detects and demonstrates exploitation of a Windows File Explorer spoofing vulnerability. The issue arises from a Windows library file .library-ms containing a network path,...

CVE-2022-24716

CVE-2022-24716 Arbitrary File Disclosure Vulnerability in Icinga Web 2 2.8.6, 2.9.6, 2.10 Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user,...

CVE-2026-85706-gitlab-poc

CVE-2026-85706 Description GitLab CE/EE unauthenticated arbitrary file read vulnerability CVE-2026-85706. Affected versions: GitLab CE/EE 18.7 – 19.1.7 GitLab CE/EE 19.2.0 – 19.2.5 GitLab CE/EE 19.3.0 – 19.3.1 Patched versions: GitLab 19.1.8 GitLab 19.2.6 GitLab 19.3.2 Vulnerability Details The...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

CVE-2025-56399

CVE-2025-56399 Mass Exploit CVE-2025-56399 – Remote Code Execution in laravel-file-manager v3.3.1. Exploits misconfigured config in Laravel File Manager to upload and verify a PHP shell via unauthenticated file upload. Installation Download repository git clone...

CVE-2019-19576

class.upload.php = 2.0.3 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.3 Tested on newly installed Ubuntu 19.10 with PHP7.3 and Apache/2.4.38 Specifically Debian/Ubuntu has been found to be vulnerable since they add the php,...

CVE-2024-52806-PoC

POC for CVE-2024-52596 / CVE-2024-52806 - SimpleSAMLphp pre-auth XXE file read...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

Filedumper

FileDumper - Memory Forensic Dumper FileDumper v1.0.1 A simple, powerful tool to dump files directly from process memory regions. Created in a late-night collaboration between human ingenuity and AI creativity — xAI's Grok + Kadir Isbirligi 2026 "Bir gece sohbet ettik, kod yazdık, masaya yumruk...

DotGit

DotGit An extension for checking if .git is exposed in visited websites Features Check if a .git/.svn/.hg folder exists for each site you visit Check if a .env file exists for each site you visit Check if a .DSStore file exists for each site you visit Check if the site is open source github/gitla...

exe2powershell

exe2powershell exe2powershell - exe2bat reborn for modern Windows exe2bat reborn in exe2powershell for modern Windows exe2powershell is used to convert any binary file .exe to a BAT file. The resulting BAT file contains only "echo" command and finally a powershell command to re-create the origina...

hook

Hook Hook exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there is a builtin low privileged user named status that this script...

cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This vulnerability allows an attacker to execute arbitrary JavaScript code immediately after opening a malicious PDF file. This affects all Firefox users 126, as Firefox uses PDF.js to display PDF files, but al...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. virtualenv -p python3...

CVE-2024-2961

CVE-2024-2961 Uses CVE-2024-2961 to perform an arbitrary file read Usage Use with wrapwrap for maximum potency. usage: arbitrary-file-read.py -h -t TARGET -c CHAIN -ct CONTENTTYPE --prefix-len PREFIXLEN --suffix-len SUFFIXLEN options: -h, --help show this help message and exit -t TARGET, --target...