Xstream-1.4.17

Xstream-1.4.17 El entorno de demostración de Xstream anterior fue configurado por mí. El entorno de explotación de vulnerabilidades se basa en JDK1.8u131. Ahora admite pruebas locales y envío remoto de paquetes HTTP. Reproducción de vulnerabilidades de XSTREAM=1.4.17 CVE-2021-39141, CVE-2021-3914...

Spring4Shell-POC

Spring4Shell PoC Application This is a dockerized application that is vulnerable to the Spring4Shell vulnerability CVE-2022-22965. Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat...

SlackShell

SlackShell Description & Changelog v1.0 This PowerShell module includes various functions that utilize the Slack API to create a command and control channel. The main function, Start-Shell, will connect to a user-specified Slack channel and authenticate using a supplied API authentication token f...

CVE-2024-36401-PoC

CVE-2024-36401-PoC Proof-of-Concept Exploit for CVE-2024-36401 GeoServer Vulnerable Versions of GeoServer are prior to 2.23.6 | 2.24.4 | 2.25.2 !!! FOR SECURITY TESTING PURPOSES ONLY !!! DO NOT USE THIS ON SYSTEMS THAT YOU DO NOT OWN UNLESS YOU HAVE EXPRESS PERMISSION !!! To run... 1. Start a...

CVE-2020-5902-Scanner

CVE-2020-5902-Escáner Escáner automatizado de ejecución remota de código en F5 Big IP CVE-2020-5902 escrito en Python 3 Descripción de la vulnerabilidad F5 lanzó una vulnerabilidad crítica de ejecución remota de código CVE-2020-5902 el 30 de junio de 2020 que afecta a varias versiones de Big IP. ...

CVE-2015-5377

CVE-2015-5377 Elasticsearch 1.5.2 es vulnerable a RCE a través de deserialización insegura de Java. El exploit ataca el protocolo de transporte en el puerto 9300. La deserialización se basa en una cadena Groovy MethodClosure para lograr RCE...

CVE-2019-5624

CVE-2019-5624 A proof of concept for Metasploit's CVE-2019-5624 vulnerability Rubyzip insecure ZIP handling RCE Intro In February 2019 I found a new vulnerability in the Rubyzip library. It allows an attacker to exploit insecure ZIP handling Zip Slip resulting in remote command execution. This...

CVE-2019-15029

CVE-2019-15029 The official exploit code for FusionPBX v4.4.8 Remote Code Execution CVE-2019-15029 Metasploit Module I wrote a simple Metasploit module to exploit this issue fusionpbxservices.rb, you just have to download it and copy it into metasploit modules directory...

CVE-2021-3129---Laravel-RCE

CVE-2021-3129---Laravel-RCE Acerca de El script ha sido creado para explotar la vulnerabilidad Laravel RCE CVE-2021-3129. Este script te permite escribir/ejecutar comandos en un sitio web que ejecute Laravel , que tenga "APPDEBUG" configurado como "true" en su archivo ".env"...

CVE-2024-41662

CVE-2024-41662 Markdown XSS leads to RCE in VNote version NOTE: The application properly validates some JavaScript payloads by performing output encoding in the app. However, it fails to validate in certain cases. 5. Further an attacker can achieve Remote Code execution using the following payloa...

cve-2020-0796-scanner

cve-2020-0796-scanner 이 프로젝트는 SMBv3 RCE 취약점인 CVE-2020-0796을 스캔하는 데 사용되는 SMBGhost를 기반으로 합니다. 배치 스캔 기능을 추가했습니다. 사용법 python3 cve-2020-0796-scanner.py -t 해결 방법 Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" DisableCompression -Type DWORD -Value 1 -Force 이...

CVE-2022-32548-RCE-POC

CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code execution vulnerability CVE-2022-32548 in /cgi-bin/wlogin.cgi via username field Technical details The web management interface of the vulnerable DrayTek devices is affected by a buffer overflow on the login page at /cgi-bin/wlogin.cgi. A...

CVE-2019-9580

CVE-2019-9580 - StackStorm exploiting CORS null origin to gain RCE Prior to 2.10.3/2.9.3, if the origin of the request was unknown, we would return null. null can result in a successful request from an unknown origin in some clients. Allowing the possibility of XSS style attacks against the...

CVE-2025-53691

CVE-2025-53691: Ejecución remota de código RCE a través de deserialización insegura El mismo mecanismo de reflexión en AjaxScriptManager puede ser utilizado para invocar el método ProcessSerializedData. Este método deserializa un payload proporcionado usando el inseguro BinaryFormatter, lo que...

CVE-2024-37084-Poc

CVE-2024-37084-Poc Configuración, análisis, exploit de demostración y PoC sobre CVE-2024-37084 Cómo usar: py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h...

CVE-2021-44077

CVE-2021-44077 Proof of Concept Exploit for CVE-2021-44077: PreAuth RCE in ManageEngine ServiceDesk Plus msiexec.exe pip install the requirements file or make sure you've got the requests package. If you're trying to catch a reverse shell, run your listener first, e.g. nc -l 4444 Then run the...

cve-2016-6662

Acerca de Una ayuda para explotar CVE-2016-6662 Advertencias Asegúrate de cambiar la IP del atacante en el archivo c antes de compilar Crédito Todo el crédito al descubridor original. Informes aquí:...

log4shell_1.x

Log4jShell1.x Log4j RCE 1.x Poc Attack Restriction 1. The target has jms environment 2. You need to gain access to modify the log4j.properties file Conclusion Not as useful as log4shell 2.x Log4shell Topic https://github.com/cckuailong/reapoc/tree/main/Topic/Log4j Welcome to contribute in reapoc...

Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter

Nuclei Template Exploit F5 BIG-IP iControl REST Omisión de Autenticación RCE | Parámetro de Comando CVE-2022-1388 es una vulnerabilidad de omisión de autenticación en el componente REST de la API iControl de BIG-IP que recibió una puntuación CVSSv3 de 9.8. La API REST de iControl se utiliza para ...

S2-057-CVE-2018-11776

S2-057-CVE-2018-11776 Un exploit simple para Apache Struts RCE S2-057 CVE-2018-11776 IMPORTANTE: Se proporciona solo con fines educativos o informativos. Desplegar entorno de prueba git clone https://github.com/vulhub/vulhub cd vulhub/struts2/s2-057 docker-compose up -d Uso exploit.py Ejemplo $...