goshs

You're mid-engagement. You need to transfer a file, catch an SMB hash, or stand up a quick HTTPS server — and python3 -m http.server won't cut it. goshs is a single-binary file server built for the moments when you need more than Python's SimpleHTTPServer but don't want to configure Apache. HTTP/...

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. nc -lnvp 1234 Change the attacker ip to your ip and port. Also create a...

cve-2019-6453-poc

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument list, an attacker is...

WindowsProtocolTestSuites

Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...

CVE-2024-23692_Exploit

CVE-2024-23692 / Exploit Code A vulnerability has been discovered in HFS 2.3 and earlier versions that allows sending CMD commands to the server to execute them. Detail: https://asec.ahnlab.com/ko/74113/ This code is for educational purposes only, and legal responsibility for misuse lies with the...

EUVD-2026-98178

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

CVE-2026-81858 IBM i is Affected By A Denial of Service Vulnerability in Host Servers

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server...

CVE-2026-81858

IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1) are vulnerable to an out-of-bounds read in the File Server component. This vulnerability could allow a remote authenticated attacker to cause a denial of service and obtain information. Remediation is available via specific PTFs: SJ11622 for versio...

CVE-2024-23692

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 Overview POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticat...

hfs-cve-2014-6287-exploit

HFS CVE-2014-6287 Exploit Tool Overview This repository contains a Python-based exploit tool designed to take advantage of the CVE-2014-6287 vulnerability in HTTP File Server HFS versions 2.3.x. This vulnerability allows an attacker to execute arbitrary commands on the server, potentially leading...

docker-log4shell

docker-log4shell Simple Go app / Docker image for playing with the CVE-2021-44228 vulnerability. Hosts a simple file server and an ldap server that provides any classes hosted in the file server: ldap://ip:1389/Hello - http://ip:8080/Hello.class docker build -t log4shell . docker run -it -v...

CVE-2024-23692

Rejetto HFS HTTP File Server CVE-2024-23692 Vulnerability Overview Rejetto HFS HTTP File Server is a simple web file server that facilitates file sharing over a network or the internet. Despite its ease of use and simplicity, a critical vulnerability CVE-2024-23692 has been discovered, making the...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

This repository does not have a README...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

Optimum

Optimum Optimum – Hack The Box Writeup Overview In this machine, the objective is to gain initial access to a Windows host by exploiting a vulnerable web service and then escalate privileges to obtain the administrator flag. The attack path involved: Service enumeration Exploitation of Rejetto HT...

CVE-2014-6287

Poc exploitbash script bash.webm About the exploit You can get reverse shell with .sh file in Linux You can get reverse shell with .py file in Windows and Linux in windows, you need to install netcat You must specify the url example: http://target.com/ using for .py: python exploit.py using for...

CVE-2024-23692

CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

CVE-2026-11111 – TOCTOU in File Permission Check Before Open Program Code Python toctouserver.py - File server that checks permission then opens import os, time, tempfile from flask import Flask, request app = Flaskname SAFEDIR = '/tmp/safe' @app.route'/read' def readfile: filename =...

CVE-2018-12533

CVE-2018-12533 Credits to https://www.lucifaer.com/2018/12/05/RF-14310%EF%BC%88CVE-2018-12533%EF%BC%89%E5%88%86%E6%9E%90/...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...