CVE-2020-8277

CVE-2020-8277 For educational purposes only. Quick Run clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you use fixed...

CVE-2019-0708-POC

CVE-2019-0708-POC Affected Versions Windows 7 Windows Server 2008 R2 Windows Server 2008 Windows Server 2003 Windows XP Must enable: Remote Desktop Port 3389, disable firewall This POC and scan tool are sourced from the internet. If any infringement occurs, please contact to delete. Affected syst...

CVE-2026-33017

CVE-2026-33017 Description CVE-2026-33017 is a simple Proof of Concept PoC demonstrating a specific vulnerability. This project is intended for educational and authorized security testing purposes only. ⚠️ WARNING: Use only in an authorized environment. Unauthorized access to computer systems is...

CVE-2025-32395

CVE-2025-32395 CVE-2025-32395-POC Batch detection tool, for learning and reproduction use only...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \ \ / / \ \ / | | \| | / \ / / \ \ \ /...

security-onion

Security Onion Security Onion 16.04 has reached End Of Life: https://blog.securityonion.net/2021/04/security-onion-1604-has-reached-end-of.html You can find the new Security Onion 2 repo at: https://github.com/Security-Onion-Solutions/securityonion/...

CVE-2023-29409

CVE-2023-29409 $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on client $ go run...

CVE-2019-3396-confluence-poc

CVE-2019-3396-confluence-poc Vulnerability verification txt and template files...

GOSINT

GOSINT - Open Source Threat Intelligence Gathering and Processing Framework The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat...

razer-lycosa-kernel-lpe-BYOVD-Vulnerability-PoC

Lycosa.sys, Razer: two kernel vulnerabilities reachable by any local user Discovered through https://github.com/416rehman/DeepZero Vendor: Razer Inc. Component: Lycosa.sys, the Razer Lycosa keyboard filter driver, x64 SHA-256: a120a6184ab16864e8a5f1dfd0cd178fca541de463b5cef946e18c34b9b6f716...

xpc-string-leak

xpc-string-leak xpc-string-leak is a proof-of-concept exploit for an out-of-bounds memory read in libxpc. This exploit uses the vulnerability to read out-of-bounds heap memory from diagnosticd, an unsandboxed root process with the taskforpid-allow entitlement. The vulnerability: CVE-2018-4248 On...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

tugtainer-PoC

Summary CVE status: requested, pending assignment. This finding is published as GHSA-crjc-6vc7-xrfh. On CVE assignment this repository is renamed CVE-YYYY-NNNNN-tugtainer-PoC and this banner is replaced with the CVE link. | ---|--- Researcher| Dostxodjayev Abdullox @squeeze440 Advisory|...

CVE-2021-32675

CVE-2021-32675 – Redis Pre-Allocation Denial of Service OOM This repository contains a functional exploit for CVE-2021-32675, a denial-of-service DoS vulnerability in Redis. The flaw allows unauthenticated remote attackers to trigger massive memory pre-allocations on the Redis server by sending...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

CVE-2020-0796-PoC

CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...

Switcheroo

Switcheroo Nintendo Switch JailBreak PoC This is a proof-of-concept of exploiting the CVE-2016-4657 vulnerability to allow for future jail-breaking of the Nintendo Switch console. Please beware that this is not a complete jailbreak, and the code shared here is for academic purpose only! We...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

CVE-2024-30088

CVE-2024-30088 This repository contains a Proof of Concept PoC written in Python for the vulnerability CVE-2024-30088. This code is an attempt to replicate the vulnerability as a technical exercise, with purely educational and demonstrative purposes, showing how Python somehow "struggles" also in...

Apache-Struts-Shodan-Exploit

APACHE STRUTS SHODAN EXPLOIT POC Author: @037 Original code can be found here. This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers. Shodan search parameter has been left out to weed out any skids trying to use this...