nginx

CVE-2017-7529 唐胜表@portfolio10 摘要 本实验重现了Nginx服务器在处理Range请求过程中发生的缓存漏洞CVE-2017-7529，并展示漏洞的实际行为 漏洞：由于Nginx对Range头处理错误，可能导致缓存数据暴露 影响：服务器缓存文件中的敏感数据泄露 环境配置与运行 操作系统：Windows 10 Docker, Python 1. 在特定目录下创建文件夹 2. 创建Dockerfile、poc.py、docker-compose.yml文件 3. 运行'docker compose up -d' 4...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

http-request-smuggler

HTTP Request Smuggler This Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync...

aapanel

aapanel aapanel 6.6.6 - CVE-2020-14950 描述：允许远程认证用户通过软件商店（Software Store）的设置菜单执行任意命令。 受影响版本：全部 = 6.6.6 信息 为了制作这个 PoC，我仅使用 docker-compose 安装了该软件。 漏洞类型：远程命令执行（认证后 RCE） PoC 前往软件商店，点击设置字段中的任意一行，在点击“启动/停止/重启”时拦截请求，然后修改/编辑该请求以执行您想要的操作。以下是一个使用 curl 的示例： aapanel 6.6.6 - CVE-2020-14421 描述：允许攻击者远程运行任意命令...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Security Gateway Information Disclosure Script based on and the credit goes to: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ This Python script scans lisy of URLs for CVE-2024-24919 vulnerability by sending specifi...

CVE-2025-22963

Overview Cross-site request forgeryCSRF vulnerability in Teedy versions = v1.11 allows remote attackers to force an end user to change their user informationusername, password, etc... on the web application in which they're currently authenticated. Vulnerability User information change endpoint i...

Havoc-C2-SSRF-poc

CVE-2024-41570: Havoc-C2-SSRF-poc This vulnerability is exploited by spoofing a demon agent registration and checkins to open a TCP socket on the teamserver and read/write data from it. This allows attackers to leak origin IPs of teamservers and much more. Full analysis:...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

CVE-2022-22978

CVE-2022-22978 Spring Security Pass Spring Security 成功 http://localhost:9090/login%0a Pass Spring Security with SayMyName 失敗 http://localhost:9090/name%0d Bypass Spring Security with Custom RBAC 失敗 http://localhost:9090/admin/admin%0d Bypass Spring Security with Annotation RBAC 失敗...

wfuzz

Wfuzz - The Web Fuzzer Wfuzz has been created to facilitate the task in web applications assessments and it is based on a simple concept: it replaces any reference to the FUZZ keyword by the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to ...

CVE-2024-51378

CyberPanel 命令注入漏洞 - CVE-2024-51378 针对 CyberPanel 预认证 RCE（远程代码执行）的命令注入漏洞利用 作者： Luka Petrovic refr4g 披露日期： 2024 年 10 月 概述 针对 CyberPanel 中命令注入漏洞（CVE-2024-51378）的概念验证（PoC）利用代码。该漏洞允许未认证的攻击者通过向 /dns/getresetstatus 和 /ftp/getresetstatus 端点发送精心构造的 OPTIONS HTTP 请求，在易受攻击的服务器上注入并执行任意命令，可能导致系统完全沦陷。 影响 能够通过网络...

POC-CVE-2023-32233

Netfilter nftables 处理批量请求时的释放后使用漏洞 演示 漏洞详情 受影响代码源自官方 Linux 内核（来自 https://kernel.org/），是 Netfilter nftables 组件的一部分（net/netfilter/nftablesapi.c）。 Netfilter nftables 允许以原子操作方式更新其配置。使用此功能时，用户态客户端发送包含一系列基本操作的批量请求。Netfilter nftables 将批量中的所有操作作为单个事务处理。在处理批量时，Netfilter nftables...

SSI-CVE-2022-21661

SSI-CVE-2022-21661 Information System's Security 2nd Assignment Study and exploit the vulnerability CVE-2022-21661 that allows SQL Injections through plugins POST requests to WordPress versions below 5.8.3. Configuring the environment To start and configure the environment, you should just run:...

CVE-2025-44603-CSRF-Leads_to_Create_FakeUsers

CVE-2025-44603（CSRF漏洞：导致创建虚假客户） 项目名称与仓库 URL :https://phpgurukul.com/client-management-system-using-php-mysql/ 漏洞名称 : 跨站请求伪造（CSRF） 受影响版本 : V1.2 简介 由 PHPGurukul 开发的客户管理系统的“添加客户”功能中存在跨站请求伪造（CSRF）漏洞。CSRF 是一种攻击方式，攻击者诱导已认证用户向 Web 应用程序提交恶意请求，从而可能导致以该用户身份执行未授权操作。在本报告中，我们演示了如何利用 CSRF 在 客户管理系统...

CVE-2025-55315-PoC-Exploit

CVE-2025-55315 Pentest Tool HTTP Request Smuggling Exploitation Tool for ASP.NET Core Kestrel ⚠️ LEGAL WARNING THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY! Use ONLY on systems you own or have explicit written authorization to test Unauthorized access to computer systems is ILLEGAL Tool...

aquaman

🔱 Aquaman 🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you already keep them, never in the agent's memory. Compatible with 1Password, keychain, keepassxc and many others. You set up Claude Code,...

CVE-2023-27163

PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...

CVE-2025-55183_POC

CVE-2025-55183 - Next.js RSC Server Function Source Code Disclosure A source code disclosure vulnerability in Next.js React Server Components RSC. A malicious HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function when the argument is...