security-labs-pocs

Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...

sockjs-dos-py

CVE-2020-7693: Meteor A demo Meteor app running the vulnerable sockjs has been included. To test the exploit on this demo app, install Meteor from https://www.meteor.com/install and then: cd demo/ meteor And then point the payload target to http://localhost:3000 Remediation Update SockJS to 0.3.2...

CVE-2020-9273

CVE-2020-9273 These are the files I created during analysis and exploitaion of CVE-2020-9273 - a heap use-after-free in ProFTPd. Take a look at the exploit video here. Description about the files in this repo: poc-not-really-v4.c - an article and poc I wrote last year oct/2020, read to understand...

CVE-2026-64600-RefluXFS-PoC

This repository does not have a README...

desc_race

descrace iOS 15.1 kernel exploit POC for CVE-2021-30955 Huge thanks to @realBrightiup for the awesome bug and exploit stratergy. His writeup can be found at: https://www.cyberkl.com/cvelist/cvedetail/24...

CVE-2023-34040

CVE-2023-34040 This PoC is cloned from https://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040 About our analyzing process, please visit PDF file on the main repo...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2026-72018

CVE-2026-72018 — Linux Kernel Out-of-Bounds Write Linux Kernel • DIBS Loopback • Out-of-Bounds Write Security research and technical analysis of CVE-2026-72018. 01 — Overview CVE-2026-72018 is a Linux kernel out-of-bounds write vulnerability affecting the DIBS/ISM loopback functionality. The...

XOE

XOE Exploit XXE Out-Of-Band Vulnerability Easily Details This tool creates xml file which contain the ip and port you entered and listen to connection to response :D Screenshot...

abstractshimmer

ABSTRACT SHIMMER CVE-2020-15257 This repo contains proof-of-concept exploit code for CVE-2020-15257 as described in our blog post. While written for containerd 1.2.x and 1.3.x, it should work on pre-patch versions of containerd 1.4.x. $ go build $ docker build -t abstractshimmer . $ docker run --...

CVE-2022-22947-POC-Reproduce

CVE-2022-22947-POC CVE-2022-22947 reproduce...

zerologon-poc

zerologon-poc A script to exploit CVE-2020-1472 Zerologon Not my research. I just wrote a PoC based on the brilliant work of other who discovered this vuln...

Vulnerability-Disclosures

Mandiant Vulnerability Disclosures This repository details vulnerabilities disclosed by Mandiant. These vulnerabilities were discovered by internal research, through Red Team assessments, or in use in the wild. Proof of concepts PoCs may or may not be provided. The following licenses/licensing...

node2shell-poc

Node2Shell — CVE-2026-111497 Lab Docker reproductible + PoC o...

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

internet-of-vulnerable-things

Internet of Vulnerable Things The results of my small term paper on the topic of the Internet of Vulnerable Things. Abstract This paper provides a practical demonstration of how insecure the Internet of Things is by hacking a typical IoT device. Several vulnerabilities were identified in the...

Exploits

Exploits Real world and CTFs exploit POCs. Real World CVE| Short description| Exploit ---|---|--- CVE-2017-5343| Wordpress SQL Injection| POC CVE-2018-8880| Unauthenticated Lutron Quantum Bacnet v2 network info exfiltration| POC CVE-2018-11629| Default and unremovable credentials in Homeworks QS...

CVE-2024-53027-WIP

CVE-2024-53027-WIP Work in Progress for POC CVE-2024-53027: Qualcomm Bluetooth/Wi-Fi Vulnerability 📄 Overview CVE-2024-53027 is a medium-severity vulnerability CVSS unrated affecting Qualcomm’s WLAN and Bluetooth chipsets in Android devices. It can cause transient denial-of-service DoS when...

CVE-2020-7461

CVE-2020-7461 PoC for DHCP vulnerability NAME:WRECK in FreeBSD For educational purposes only Environment Host: macOS 11.2.1 Vagrant: 2.2.15 Victim: FreeBSD 12.1-STABLE r364849 Attacker: Ubuntu 20.04 Disclaimer This PoC will cause DoS instead of RCE to prevent abuse. PoC Turn off DHCP server in...

Kerberos-CVE-2026-27912

Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...