CVE-2023-22884-Airflow-SQLi

Apache Airflow SQL injection PoC CVE-2023-22884 PoC for CVE-2023-22884 is an Apache Airflow RCE vulnerability affecting versions prior to 2.4.0. The official report description says: Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software...

mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE ラボ 未改変の標準 MariaDB 13.0.1-rc Docker イメージ 上で、uid 999 mysql としてリモートコード実行を行います。 2つのエクスプロイト亜種: 亜種| ファイル| 要件| 備考 ---|---|---|--- Pure SQL （推奨）| exploitpuresql.py| 低権限 MariaDB アカウント + TCP| ホストアクセス不要、docker 不要、/proc/mem 不要、root パスワード不要 ホスト支援型 PoC| exploit.py| Docker ホスト上の root|...

Wordpress-DOS

CVE-2018-6389 exploit for Wordpress sites A small DOS script targeting an unpatched vulnerability in wordpress sites. Uses /wp-admin/load-scripts.php to request additional scripts from hosting server. Includes large list of scripts as request payload This implementation is for testing purposes on...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2021-26855

CVE-2021-26855 CVE-2021-26855 ssrf 简单利用 golang 练习 影响版本 Exchange Server 2013 小于 CU23 Exchange Server 2016 小于 CU18 Exchange Server 2019 小于 CU7 利用条件 该漏洞不同于以往的 exchange 漏洞，此漏洞并不需要一个可登录的用户身份，可以在未授权的情况下获取内部用户资源，配合 CVE-2021-27065 可以实现远程命令执行。 漏洞触发必要条件 目标服务器存在漏洞 目标 exchange 服务器必须为负载均衡服务器，即同时使用两台及以上服务器...

Fold8-Ultra-Root-F976N

더 개선된 버전의 임시 루트 앱을 권장합니다. 👉 DirtyFrag-Galaxy 👈 Fold8-Ultra-Root-F976N 한국어 · English 삼성 갤럭시 Z 폴드8 울트라SM-F976N , 코드명 q8q용 원클릭 KernelSU 설치 도구입니다. CVE-2026-43499 late-load 익스플로잇을 Shizuku 로 실행합니다. 최신 APK 다운로드 ⚠️ 경고 I am not responsible for bricked phones. — 벽돌된 폰에 대해 책임지지 않습니다. 이 도구는 파티션을 플래시하지 않는 임시...

Wordpress-DOS-Attack-CVE-2018-6389

Wordpress-DOS-Attack-CVE-2018-6389 load-scripts.php ファイルは、単一のリクエストで複数の JavaScript パッケージを取得するためのものです。 $ chmod +x Execute.sh $ ./Execute.sh 動作の仕組み！ 問題は load-scripts.php ファイルにあります。このファイルは、bootstrap、jquery、jqueryUI など、複数の JavaScript パッケージを単一のリクエストで取得するためのものです。 特別なリクエストを作成することで、大量の異なる JavaScript...

HAProxy-Keepalived-Sec-HighLoads

HAProxy and Keepalived LoadBalancer+Cluster+Sec+HighLoads Installation and Configuration HAProxy is an open-source software that provides a proxy server service for TCP and HTTP based applications with high availability load balancing. Keepalived is an open-source software capable of providing IP...

CVE-2025-47810

PunkBuster LPI CVE-2025-47810 Background PunkBuster installs itself as two services, and an optional? kernel driver. PnkBstrA: Service that runs constantly in the background, and in charge of managing PunkBuster as a whole PnkBstrB: Service that starts when a protected game starts. Comes with mor...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

CBM

Car Backdoor Maker The Car Backdoor Maker is a software for making attack templates and load them into The Bicho. Before starting, please read how to Get The Bicho hardware. Screnshot Install and Usage This project has its wiki where you will find the following useful documentation: Installation...

Blackash-CVE-2025-32023

CVE-2025-32023 - Redis Remote Code Execution RCE 🚨 🧠 Overview: A critical RCE vulnerability affecting Redis 7.2.4, where attackers can load malicious modules using the MODULE LOAD command. 🕳️ Vulnerability Type: Remote Code Execution RCE 💥 Impact: An unauthenticated attacker can execute arbitrary...

Identificador-CVE-2018-11759

Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example: Call...

wordpress-CVE-2018-6389

wordpress-CVE-2018-6389 WordPress DOS load-scripts.php CVE-2018-638 用の Metasploit モジュール...

Identificador-CVE-2018-11759

他の言語 git - pt-BR インスタンスがCVE-2018-11759にさらされているか確認してください mainアーカイブは、エクスプロイト用のbashスクリプトです。 URLはプロトコルと完全なアドレスを使用する必要があります。例: https://test.site.com.br 複数のURLを一度に確認するには、ヒアドキュメントを使用できます。例: Call the bash, no request permission for exec bash main EOF https://vulpagepagevul.com...

Am-I-affected-by-Meltdown

Am I affected by Meltdown?! Meltdown CVE-2017-5754 checker What am I? Proof-of-concept / Exploit / Checks whether system is affected by Variant 3: rogue data cache load CVE-2017-5754, a.k.a MELTDOWN. The basic idea is that user will know whether or not the running system is properly patched with...

lbmap

Proof of concept scripts for advanced HTTP fingerprinting, presented at OWASP AppSecAsia 2012. These scripts should be considered a PoC or alpha quality. Suggestions, recommendations, signatures, pathces and flames are welcome via http://www.github.com/wireghoul/lbmap. The following tools are...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' サービス拒否 DoS -t PoC cve-2018-6389...

Mysql-Readfile

Introduction このプロジェクトは主に load data local infile を使用して、攻撃者のホスト（Windows プラットフォーム）上の任意のファイルを取得します。アクセスするファイルは file.txt にリストアップできます。これは、何らかの状況で Mysql の接続設定を制御できる場合に非常に有意義です。 Project usage Step 1: 偽の Mysql サーバーを起動する python2 Mysql-Read.py Step 2: 悪意のあるサーバーに接続する Referer...

xll_windows_reverse_shell

xllwindowsreverseshell xll Windowsリバースシェル 攻撃者（Kali）マシンで： git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. revsh.ps1 を更新します 2. Python HTTPサーバーを作成します python3 -m http.server 9999 攻撃者（Windows）マシンで： 1. notpadXLL.c をWindows攻撃者マシンに移動し、notpadXLL.c を適宜更新します。 2. x64 Native Tools Command...