CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information Published : 2024-09-26 Base Score : 5.3 MEDIUM EPSS Score : 0.06% Probability of exploitation. Vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Description : CUPS is a standards-based, open-source printing system, and...

CVE-2022-21661

CVE-2022-21661 1. Introduction WordPress v4.1v5.8.2 WPQuery SQL Injection POC 2. Usage poc -h 192.168.1.1 // 单个扫描 poc -f host.txt // 批量扫描 3. Disclaimer This tool is intended only for learning, research, and self-assessment. It must not be used for illegal purposes. Please comply with relevant...

CVE-2020-14882_POC

CVE-2020-14882 Batch Verification Usage python3 CVE-2020-14882.py Put the targets in target.txt, one per line Example...

CVE-2024-31982

CVE-2024-31982 PoC and Bulk Scanner Overview POC for CVE-2024-31982: XWiki Platform Remote Code Execution 14.10.20. This POC is based on this security advisory . How to Use Single Target Scan To scan a single target endpoint: python CVE-2024-31982.py -u target Bulk Target Scan To mass scan bulk...

CVE-2020-7247-exploit

CVE-2020-7247-exploit OpenSMTPD 6.4.0 - 6.6.1 Remote Code Execution PoC exploit Reference: https://www.openwall.com/lists/oss-security/2020/01/28/3 Usage python3 exploit.py Dependencies pip3 install --user pwntools...

CVE-2018-19131

CVE-2018-19131 Demo Author: Jonathan M. Wilbur Copyright Year: 2018 License: MIT License Do not do anything illegal with this. This is not malware. This is just a proof of concept. This is a demo of CVE-2018-19131, which runs in a Docker Compose app. This library builds Squid version 3.5.27, whic...

CVE-2023-36025

CVE-2023-36025 Simple test for CVE-2023-36025, based on PoC demoed in https://twitter.com/wdormann/status/1725148437115473947 This code is not meant to run out of the box - the ZIP file must be hosted on a server you own, and be accesible to the victim machine on a file:// URL...

CVE-2024-6387

CVE-2024-6387 regreSSHion Proof of concept python script for regreSSHion exploit. Version 0.2.1 build POC Installation git clone https://github.com/l-urk/CVE-2024-6387.git cd CVE-2024-6387 pip3 install -r requirements.txt python3 regreSSHion.py -h Usage 🔒 CVE-2024-6387 regreSSHion remote code...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...

log4shell-vulnerable-app

Log4Shell sample vulnerable application CVE-2021-44228 This repository contains a Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell. It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1 and the JDK 1.8.0181. Running the application Run it: docker run --name...

eps-CVE-2017-0261

eps-CVE-2017-0261- eps vulnerability CVE-2017-0261 analysis Analysis process idb ida6.1 Intermediate documents Loading the eps program POC code used And the original vulnerability file...

chainoffools

CryptoAPI CVE-2020-0601: Windows CryptoAPI Spoofing Vulnerability exploitation. More information in our blog post. Install requirements pip install -U -r requirements.txt The certificate generation works with OpenSSL verion up to 1.0.2u. CA certificate We used the USERTrust ECC Certification...

cert-pinning-flaw-poc

cert pinning flaw POC Simple POC script for testing CVE-2016-2402 and similar flaws. Read my blog post for details. This utility will set up a HTTPS server that servers a malicious certificate chain to the client for a specific domain. If traffic from an app with a vulnerable certificate pinning...

CVE-2021-41773

CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. AllowOverride none Require all granted Create a Dockerfile in your project FROM httpd:2.4.49 COPY ./httpd.conf...

CVE-2024-28995

CVE-2024-28995 PoC and Bulk Scanner Overview This repository contains a proof-of-concept PoC and a bulk scanner for the SolarWinds Serv-U CVE-2024-28995 directory traversal vulnerability. This vulnerability allows unauthorized access to read sensitive files on the host machine. The vulnerability...

Tentacle

Tentacle .. . . .. | || || \ | | | | / \ / || | | | 1.0.0stable ---| |----| | | | | ---| |---- / ^ \ | ,----'| | | | | | | | | . | | | / /\ \ | | | | | | | | | | | |\ | | | / \ | ----.| ----.| | || |||| | || // \ ||||| http://www.orleven.com Tentacle is a POC vulnerability verification and...

CVE-2022-29968

CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 uninitialized memory in the Linux Kernel, specifically the iouring system. The crash was found with Syzkaller. The crash was analyzed by Joseph Ravichandran and Michael Wang. The exploit was written by Joseph Ravichandran. We found &...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

CVE-2020-7461

CVE-2020-7461 PoC for DHCP vulnerability NAME:WRECK in FreeBSD For educational purposes only Environment Host: macOS 11.2.1 Vagrant: 2.2.15 Victim: FreeBSD 12.1-STABLE r364849 Attacker: Ubuntu 20.04 Disclaimer This PoC will cause DoS instead of RCE to prevent abuse. PoC Turn off DHCP server in...

CodeTest

Welcome to CodeTest 👉About This Project The main purpose of this project: to provide a unified execution entry point using a visual interface for Python POC\EXP test scripts collected daily, making it convenient to run. Target audience: penetration testers with a Python foundation the tool comes...