12896 matches found
awesome-security-vul-llm
Awesome Security Vulnerability ProjectBy LLM Project Introduction This project uses a large model combined with a crawler to retrieve all projects on GitHub that contain valuable vulnerability information, vulnerability POCs, or rule information. It automatically identifies the project's director...
s2-062
s2-062 Remote Code Execution S2-062 CVE-2021-31805 Verification POC Verification method vulfocus range issue The poc inside validates against the s2-061 range, with the parameter id; the new range uses the parameter name The main reason for identifying it as id is that I can't think of any good...
CVE-2025-1974_IngressNightmare_PoC
CVE-2025-1974IngressNightmare poc IngressNightmare Script A Python script to automate sending JSON payloads to a list of IPs via curl, capturing responses and splitting them into success and failure XML reports. Features Sends HTTPS POST requests with a JSON payload to multiple IP addresses...
CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application This repository contains a Go-based proof-of-concept scanner for CVE-2026-22557 targeting the UniFi Network Application. The tool performs a controlled and non-destructive scan against a set of common endpoints and traversal payloads...
CVE-2025-68613-POC
🚨 CVE-2025-68613: Vulnerabilidad RCE Crítica en n8n Tabla de Contenidos 1. Resumen 2. ¿Qué es n8n? 3. Conceptos Básicos de la Vulnerabilidad 4...
CVE-2022-0847
DirtyPipe Exploit for the DirtyPipe vulnerability written, and discovered by Max Kellermann - https://dirtypipe.cm4all.com/ POC...
CVE-2020-7461
CVE-2020-7461 PoC for DHCP vulnerability NAME:WRECK in FreeBSD For educational purposes only Environment Host: macOS 11.2.1 Vagrant: 2.2.15 Victim: FreeBSD 12.1-STABLE r364849 Attacker: Ubuntu 20.04 Disclaimer This PoC will cause DoS instead of RCE to prevent abuse. PoC Turn off DHCP server in...
EtwSessionHijacking
EtwSessionHijacking: un PoC sobre el bloqueo de Procmon para evitar que monitoree eventos de red Demo: https://user-images.githubusercontent.com/111295429/186082150-32ed304b-ba45-42a4-8baa-37dd75246c68.mp4 Basado en : Problemas de diseño de los EDR modernos: evadiendo soluciones basadas en ETW...
kassandra_x33fcon_2026
kassandrax33fcon2026 Este repositorio contiene la herramienta PoC presentada en x33fcon 2026, junto con las diapositivas de la presentación asociadas. El contenido se pone a disposición con fines de investigación y educativos...
CVE
Repositorio de Exploits de Prueba de Concepto Este repositorio contiene mi colección personal de exploits de prueba de concepto PoC creados con fines de pruebas de seguridad e investigación. Cada carpeta está organizada por identificador de CVE por ejemplo: CVE-2025-XXXX/, y en su interior...
CVE-2021-21972
Check CVE-2021-21972 CVE-2021-21972 vCenter-6.5-7.0 RCE POC...
r00kie-kr00kie
r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...
deep-C
Deep-C Deep-C is an Android Deep Link Exploitation Framework that automatically decompiles APKs, identifies exposed and insecure deep link entry points, validates exploitability using static analysis and optional AI verification , and generates executable adb Proof-of-Concepts PoCs. Deep-C is...
CVE-2021-1732
CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...
CVE-2024-47176
PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information...
Ultimate-wp2shell
WP2Shell – Prueba de Concepto Prueba de Concepto PoC educativa y defensiva para validar la exposición a las vulnerabilidades del núcleo de WordPress CVE-2026-60137 y CVE-2026-63030 WP2Shell. Resumen Este repositorio proporciona una prueba de concepto de detección y validación defensiva para las...
frida-android-libbinder
frida-android-libbinder PoC Frida script to view Android libbinder traffic. The following links were a great source of inspiration and knowledge: https://www.blackhat.com/docs/eu-14/materials/eu-14-Artenstein-Man-In-The-Binder-He-Who-Controls-IPC-Controls-The-Droid.pdf...
dora
dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...