C2-Pwn

C2-Pwn Uses Shodan API to pull down C2 servers to run known exploits on them. Requires shodan account for API. https://www.shodan.io/ Rat Exploit Support Dark Comet Remote File Download https://www.rapid7.com/db/modules/auxiliary/gather/darkcometfiledownloader Gh0st Rat buffer Overflow...

elfxtract

ELFXtract ELFXtract es una herramienta de análisis automatizado utilizada para enumerar binarios ELF Desarrollado por Radare2 y r2ghidra Está especialmente diseñado para desafíos PWN y tiene muchas características automatizadas Muestra casi todos los detalles del ELF y también descompila su ASM a...

struts-pwn_CVE-2017-9805

struts-pwn - CVE-2017-9805 Exploit An exploit for Apache Struts CVE-2017-9805 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' Check if the vulnerability exists against a list of URLs. python struts-pwn.py...

struts-pwn_CVE-2018-11776

struts-pwn - CVE-2018-11776 Exploit An exploit for Apache Struts CVE-2018-11776 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/demo/struts2-showcase/index.action' Check if the vulnerability exists against a list of URLs. python...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...

seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

Challenges_2022_Public

blockchain Challenge| Autor| Schwierigkeit| Veröffentlichungsrunde ---|---|---|--- Solve Me| @bluealder| Anfänger| Runde 1 Crypto Casino| joseph8210| Leicht| Runde 2 Secret and Ephemeral| @bluealder| Mittel| Runde 1 Private Log| @bluealder| Schwer| Runde 1 EVM Vault Mechanism| joseph8210| Schwer|...

ctf-skills

ctf-skills Agent Skills per risolvere sfide CTF — exploit web, pwn binario, crittografia, reverse engineering, analisi forense, OSINT e altro ancora. Funziona con qualsiasi strumento che supporti la specifica Agent Skills, incluso Claude Code. Installazionebash npx skills add ljagiello/ctf-skills...

2018-QWB-CTF

2018-QWB-CTF 2018 Qiangwang Cup CTFRaccolta di sfide root@kitploit: │ ├── 01Misc-4题 │ ├── Nome della challenge: ai-nimals │ │ └── Nome della challenge: ai-nimals.mhtml │ ├── Nome della challenge: welcome │ │ └── Nome della challenge: welcome.mhtml │ ├── Nome della challenge: Check-in │ │ └── Nome...

CVE-2024-21338-1

CVE-2024-21338 Questo PoC è stato sviluppato per il contest XSS PWN-Day. https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

GlacierCTF2023_writeups

Glacierctf 2023 Descrizione Data del CTF: 24.11.2023 - 26.11.2023 Durata: 48 ore CTF Time: https://ctftime.org/event/1992 GlacierCTF 2023 è stata la seconda edizione del CTF in stile jeopardy organizzato da LosFuzzys. Il CTF ha proposto sfide in varie categorie, tra cui pwn, rev, web, crypto, sma...

chall2026-telneted

@Hack 2026: Telneted Autore: Harsh. Categoria : Pwn Risoluzioni : 34/120 Tag : beginner Protocollo : telnet Il team di ricognizione ha trovato un altro endpoint nella rete degli Alieni, ma non riusciamo a connetterci con i nostri strumenti. Le catture di rete mostrano un utente 'astrax' che lo...

EUVD-2026-54565

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

PT-2026-65944

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

rspwner

RSPWNER RSPWNER is a Rust-based AI-assisted CTF pwn assistant...

CVE-2026-41249

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow .github/workflows/static.yml uses the pullrequesttarget trigger but dangerously checks out the unverified code from the pull request head ref: $ github.event.pullrequest.head.re...

CVE-2026-45315

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload endpoint takes the file extension from the user-supplied filename and saves the file under CACHEDIR/audio/transcriptions/.. The /cache/path route serve...

Fedora 43 : kernel (2026-03be3dc34b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03be3dc34b advisory. The 7.0.8 stable kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia...

Fedora 42 : kernel (2026-8b4a8d18d2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8b4a8d18d2 advisory. The 6.19.14-104 kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia. --...

Fedora 44 : kernel (2026-2aeb7d033a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2aeb7d033a advisory. The 7.0.8 stable kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia...