log4j2-bugmaker

Log4j2-BugMaker Proyecto de demostración de la vulnerabilidad Log4Shell CVE-2021-44228 Este es un proyecto de demostración para estudiar e investigar la vulnerabilidad de ejecución remota de código en Log4j2 Log4Shell. ⚠️ Advertencia de seguridad Este proyecto está destinado únicamente a fines de...

CVE-2024-55182

CVE-2025-55182 React2Shell Vulnerabilidad 1. Explicación sobre la Vulnerabilidad: CVE-2025-55182 “React2Shell” es una vulnerabilidad crítica de Ejecución Remota de Código RCE dentro de React Server Components RSC — específicamente en la lógica de deserialización del protocolo React Flight. Afecta...

CVE-2021-3007-docker-poc

CVE-2021-3007 — Laminas/Zend HTTP 反序列化远程代码执行 本仓库包含 CVE-2021-3007 的完整可复现概念验证（PoC）及 Nuclei 利用模板。该漏洞是 Zend\Http\Response\Stream（laminas-http Nuclei 利用模板 ├── docker-compose.yml - 脆弱测试环境 ├── Dockerfile ├── vulnerable-app/ │ ├── index.php - unserialize 脆弱端点 │ └── composer.json - 脆弱依赖 ├── exploit.php -...

Rust_CVE-2025-55182

CVE-2025-55182 漏洞利用工具 （Rust版本） 项目概述 本项目是一个使用 Rust 语言开发的安全研究工具，针对 [email protected] 中存在的远程代码执行（RCE）漏洞。该漏洞允许攻击者通过构造恶意的 Server Action 请求，在未经身份验证的情况下在目标服务器上执行任意代码。 核心功能 工具提供了多种利用方式： 命令执行：通过 vm 模块或 childprocess 模块在目标服务器上执行任意 Shell 命令 文件读取：利用 fs 模块读取服务器上的敏感文件 JavaScript 执行：直接在服务器端执行任意 JavaScript 代...

CVE-2021-21220

Exploitation of CVE-2021-21220 From Incorrect JIT Behavior to Remote Code Execution Overview This presentation explains the exploitation of CVE-2021-21220 , a vulnerability in Google Chrome’s V8 JavaScript engine caused by incorrect JIT compiler assumptions during optimization. The presentation...

USN-8722-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an SSH server could use this issue to cause libssh2 to crash or possibly execute arbitrary code. CVE-2026-66032 It was discovered that libssh2 incorrectly handled AES-GCM cipher...

Sandbox-Challenge-Spring4Shell-CVE-2022-22965-

Spring4Shell Threat Sandbox CVE-2022-22965 Overview This walkthrough documents the completion of the Sandbox Challenge focused on CVE-2022-22965, commonly known as Spring4Shell — a critical CVSS 9.8/10 remote code execution vulnerability affecting specific versions of the Spring Java framework. T...

Vulnerability-Assessment-Exploitation-Lab

漏洞评估与利用实验环境 Metasploitable 2 渗透测试实验室 执行摘要 本项目记录了一次针对 Metasploitable 2 Linux 环境的成功、全生命周期渗透测试。评估过程遵循 渗透测试执行标准（PTES） ，涵盖初始侦察、漏洞利用以及后渗透凭据恢复。主要目标是展示未修补遗留服务及弱密码策略所导致的安全风险。 技术实验架构 执行本实验需要专门的虚拟化策略，以桥接 Apple Silicon M5 芯片 上的架构差异： 攻击机： Kali Linux（ARM 版），通过 UTM 虚拟化。 目标机： Metasploitable 2（x86 架构），通过 UTM/QEMU...

htb-labs-nexus

🏴‍☠️ HTB Labs - Nexus English 🇺🇸 | Español 🇪🇸 English | Español 📋 概述 Nexus 是 Hack The Box 上一台简单难度的 Linux 机器 ，演示了一条多阶段攻击链，涉及虚拟主机枚举、暴露的凭据、易受攻击的 Web 应用功能、远程代码执行、凭据重用和本地权限提升。 攻击链 root@kitploit: 侦察 │ ▼ 虚拟主机枚举 │ ├── git.nexus.htb └── billing.nexus.htb │ ▼ Gitea 提交历史 │ ▼ 暴露的凭据 │ ▼ Krayin CRM 登录 │ ▼...

CVE-2021-44228

🛡️ CVE-2021-44228: Log4Shell Analysis - The Vulnerability That Revolutionized Java Security Critical Impact CVSS 10.0 | Discovered in 2021, this flaw in Apache Log4j allows remote code execution RCE and affects millions of systems globally. Even today, it remains a key reminder for cybersecurity! ...

Sandbox-Challenge-Log4Shell-CVE-2021-44228-

Sandbox Challenge: Log4Shell CVE-2021-44228 Overview This walkthrough documents the steps taken to complete the CISA Threat Sandbox Challenge for CVE-2021-44228, commonly known as Log4Shell. The challenge involved completing two objectives — one red team offensive and one blue team defensive —...

react2shelldemo

React2Shell CVE-2025-55182 — Local RSC Security Demo ⚠️ WARNING This repository is for educational and defensive security research only. Do NOT attempt to run this code against: Production systems Public websites Servers you do not own or have explicit permission to test Unauthorized exploitation...

CVE-2020-29607-POC

Pluck CMS 4.7.13 File Upload RCE Exploit 🚨 Educational Remote Code Execution Exploit 🚨 Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...

Log4Shell-CVE-2021-44228-

Log4Shell CVE-2021-44228 - SOC Report Analysis Overview This repository contains a comprehensive Security Operations Center SOC analysis of Log4Shell CVE-2021-44228 , one of the most critical vulnerabilities discovered in 2021. The vulnerability affects the Apache Log4j logging library and poses ...

CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600 Drupalgeddon2 — 红队项目 ITSOLERA 网络安全部门 | 攻防安全实习 2026 概述 本项目研究、复现并记录了 CVE-2018-7600 Drupalgeddon2 —— Drupal CMS 中的一个严重（CVSS 9.8）未认证远程代码执行漏洞， 影响 7.58 和 8.5.1（2018 年 3 月发布）之前的版本。 该漏洞存在于 Drupal 的 Form API 中，它在将用户提供的输入合并到表单元素渲染属性之前未能对其进行清理——从而允许攻击者注入 PHP 可调用对象，Render API 随后会执行这些对象。 ⚠️...

CVE-2023-22527

CVE-2023-22527 - Atlassian Confluence 远程代码执行 概述 CVE-2023-22527 是 Atlassian Confluence Data Center 和 Server 中的一个严重远程代码执行漏洞。该漏洞允许未经认证的攻击者通过特定端点中的模板注入，在易受攻击的 Confluence 实例上执行任意代码。 快速事实 CVE ID : CVE-2023-22527 CVSS 评分 : 10.0（严重） CVSS 向量 : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CWE :...

EUVD-2026-70404

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169 n8n before 1.123.73 Remote Code Execution via $fromAI Prototype Leak

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-prototyp...

CVE-2026-85169

n8n versions before 1.123.73 , 2.35.4 , and 2.36.2 contain an expression sandbox escape in the $fromAI handler. The handler resolved a caller-supplied placeholder name without requiring it to be an own property and admitted reserved keys; against a primitive input value it returned a live host-pr...