BadAssMacros

BadAssMacros Description Proof of Concept tool to generate malicious macros leveraging techniques like VBA Purging and Shellcode Obfuscation to evade AV engines. This tool takes in raw shellcode that can be generated by popular C2 frameworks like Metasploit,Cobalt Strike etc and outputs a VBA...

CVE-2021-44228-poc

CVE-2021-44228-poc CVE-2021-44228 POC / Example...

CVE-2024-7928

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. How to Use FOFA : app="FASTADMIN" Install the script requirements: pip install -r requirements.txt Single Target: python CVE-2024-7928.py -u https://target:9090 Bulk Sscan: python CVE-2024-7928.py -f...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

CVE-2024-7029

EN GenAvTechRCEExploit A PoC exploit for the CVE-2024-7029 vulnerability found in AvTech devices, allowing Remote Code Execution RCE. This tool can scan for vulnerable devices and execute commands on them interactively. Features Vulnerability Detection : Check if AvTech devices are vulnerable to...

Home-Demolisher

Home-Demolisher PoC for CVE-2021-31166 and CVE-2022-21907 Usage: usage: CVE-2021-31166.py -h -u URL -l LIST -o OUTPUT Description message options: -h, --help show this help message and exit -u URL, --url URL IIS Server url. For instance: 192.168.1.110 -l LIST, --list LIST IIS Server urls list. Fo...

CVE-2023-25136

OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...

Arduino-Netcat-Backdoor

Arduino - Netcat - Backdoor for Windows Name suggestions welcome. Proof Of Concept. Not intended for real life use. I can't take responsibillity for stuff other people do with this Attacks a Windows machine running Windows 7 or later, creating a persistent Backdoor. Funtionallity The Arduino-scri...

CVE-2025-5777

. PoC POST /p/u/doAuthentication.do HTTP/1.1 Host: 167.xxx.xx.x Content-Length: 5 login . The tool verfiy then 20 more requests to exploit. . Usage:- python CVE‑2025‑5777.py python CVE‑2025‑5777.py -l test.txt...

CVE-2021-20837

CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...

CVE-2022-26134-cve1

CVE-2022-26134RCE Installation git clone https://github.com/yigexioabai/CVE-2022-26134-cve1.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt 把CVE-2022-26134RCE.py放到pocsuite3\pocs目录下 cd pocs Using pocsuite3 Single URL: pocsuite -r CVE-2022-26134RCE.py -u url Multiple URLs: pocsuite -r...

cve-2020-2555

CVE-2020-2555 Running Main.java will generate payload.ser in the current directory. This payload can be sent to the target server using the t3 protocol...

spring-break_cve-2017-8046

spring-breakcve-2017-8046 This is a Java program that exploits Spring Break vulnerability CVE-2017-8046. This software is written to have as less external dependencies as possible. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

Invisi-Shell

Invisi-Shell Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features ScriptBlock logging, Module logging, Transcription, AMSI by hooking .Net assemblies. The hook is performed via CLR Profiler API. Work In Progress This is still a preliminary version...

CVE-2017-7921

CVE-2017-7921 Hikvision unauthorized access detection poc and password detection Usage： Usage: -a 加载Poc模块 -b 加载密码爆破模块 -e 加载Exp模块 -f string 文件名称 默认为空 -i string 输入ip地址 eg:192.0.0.1-192.0.0.255 -p string 密码 default:12345 default "12345" -s string 协议 eg:http default "http" -t int 线程数量 默认50 default 50...

brokentooth

brokentooth POC for CVE-2018-4327 at least I think so since CVE-2018-4327 and CVE-2018-4330 were both discussed by @SparkZheng but it's not clear from him which one relates to which bug but since he described this one first I'm taking a guess. Tested on iPhone 6S 11.3.1 Should work until 11.4 Let...

CVE-2015-1635

️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...

kassandra_x33fcon_2026

kassandrax33fcon2026 This repository contains the PoC tool presented at x33fcon 2026, along with the associated presentation slides. The content is made available for research and educational purposes...

CVE-2022-30190

CVE-2022-30190 Usage Windows only Create docx file: $ PoC.py docx your-host-ip Run server directly: $ PoC.py host...

frida-android-libbinder

frida-android-libbinder PoC Frida script to view Android libbinder traffic. The following links were a great source of inspiration and knowledge: https://www.blackhat.com/docs/eu-14/materials/eu-14-Artenstein-Man-In-The-Binder-He-Who-Controls-IPC-Controls-The-Droid.pdf...