143 matches found
Exploit for Deserialization of Untrusted Data in Fortra Goanywhere_Managed_File_Transfer
Structure du projet cve-2023-0669-simulation/ ├── docker-comp...
BloodFang
🩸 BloodFang !Versionhttps://img.shields.io/badge/version-1...
webVuln-scanner
WebVuln Scanner An advanced web vulnerability scanner with cu...
Exploit for CVE-2025-12907
Chrome DevTools RCE Exploit CVE-2025-12907 Overview This...
Exploit for Injection in Google Android
EXPLOITER: Automated Exploit for CVE-2024-0044 EXPLOITER...
pentest-automation-suite
Penetration Testing Automation Tools 🔴 Automated Penetratio...
AutoPayloadGen
AutoPayloadGen bash How to execute python3 launch.py...
sqlmap-ctt
sqlmap-CTT ========== sqlmap-CTT is an advanced SQL injection t...
marshalsec
It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...
VIPER_2025
VIPER 2025 VIPER 2025 is an advanced, modular penetration...
Windows
Windows Awesome tools to play with Windows ! List of tools used for exploiting Windows: - Exploitation : Windows Software Exploitation - hacking-team-windows-kernel-lpe : Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar. - mimikatz : A little tool to play with...
Exploit for Deserialization of Untrusted Data in Microsoft
OurSharePoint - CVE-2025-53770 PoC This is a simple C tool...
Exploit for Deserialization of Untrusted Data in Microsoft
OurSharePoint - CVE-2025-53770 PoC This is a simple C tool...
Remote Keyboard Desktop 1.0.1 - Remote Code Execution (RCE)
Exploit Title: Remote Keyboard Desktop 1.0.1 - Remote Code Execution RCE Date: 05/17/2025 Exploit Author: Chokri Hammedi Vendor Homepage: https://remotecontrolio.web.app/ Software Link: https://apps.microsoft.com/detail/9n0jw8v5sc9m?hl=neutral&gl=US&ocid=pdpshare Version: 1.0.1 Tested on: Windows...
Exploit for Uncontrolled Search Path Element in Imagemagick
ImageMagick Arbitrary Code Execution CVE-2024-41817 Proof o...
Exploit for Out-of-bounds Write in Exim
CVE-2023-42115: Exploit and Payload Generator Scripts This r...
BYOB Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'sqlite3' class MetasploitModule 'BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection CVE-2024-45256, CVE-2024-45257', 'Description' = %q Thi...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
It is an offensive tool for fuzzing. This repository contains a...
BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection (CVE-2024-45256, CVE-2024-45257)
This module exploits two vulnerabilities in the BYOB Build Your Own Botnet web GUI: 1. CVE-2024-45256: Unauthenticated arbitrary file write that allows modification of the SQLite database, adding a new admin user. 2. CVE-2024-45257: Authenticated command injection in the payload generation page...