CVE-2023-27163---SSRF-Baskets-Requests

CVE-2023-27163---SSRF-Baskets-Requests Create by TheAlchimist cve-2023-27163-ssrfbaskets.py example : cve-2023-27163-ssrfbaskets.py http://mysite.com http://localhost...

CVE-2025-14847

🚨 CVE-2025-14847 — “MongoBleed” A high-severity unauthenticated memory disclosure vulnerability 📖 Table of Contents Overview Technical Details Severity & CVSS Affected Versions Real-World Impact Exploitation Summary Detection Guidance Remediation Mitigation Temporary Security Checklist Summary 🔎...

CVE-2021-26084

Confluence Server Webwork Pre-Auth OGNL Injection CVE-2021-26084 Confluence is a web-based corporate wiki developed by Australian software company Atlassian. An OGNL injection vulnerability exists that allows an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data...

snallygaster

snallygaster Encuentra fugas de archivos y otros problemas de seguridad en servidores HTTP. ¿qué? snallygaster es una herramienta que busca archivos accesibles en servidores web que no deberían ser públicos y que pueden suponer un riesgo de seguridad. Los ejemplos típicos incluyen repositorios gi...

graphw00f

Créditos a Nick Aleks por el logo! graphw00f - Fingerprinting de servidores GraphQL Tabla de Contenidos ¿Cómo funciona? Detecciones Matriz de Amenazas GraphQL Requisitos previos Instalación Configuración Ejemplo de uso Fingerprinting de GraphQL Detección y Fingerprinting de GraphQL Soporte e...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauthenticated RCE ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║ ╚████║╚██████╔╝ ██║...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Metasploit module and lab setup for authenticated Remote Code Execution in the Grav Admin Plugin Direct Install functionality. Overview CVE: CVE-2025-50286 Impact: Authenticated RCE Vector: Admin panel → Direct Install Result: Arbitrary command executi...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview Field| Details ---|--- CVE| CVE-2025-24893 Software| XWiki Vulnerability| Server-Side Template Injection SSTI → RCE Authentication| Not required CVSS Score| Critical Context| Discovered during HackTheBox CTF Description XWiki exposes a...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

cve-2019-16278

CVE-2019-16278 This is an exploit for the CVE-2019-16278 vulnerability. It allows remote code execution on an nhttpd server v1.9.6. Building from Source This tool is written in Rust and you need to install the Rust compiler which is super easy if you follow the instructions in their page Compilin...

frontpage-server-extensions-vulnerability-scanner

Frontpage Server Extensions Vulnerability Scanner This Python script automates the process of scanning for the CVE-2000-0114 vulnerability in Microsoft Frontpage Server Extensions. It's designed to help security professionals and system administrators identify potentially vulnerable subdomains...

byob

¿Preguntas? Consulta la documentación o únete a nuestro servidor de soporte en Discord Descargo de responsabilidad : Este proyecto debe ser utilizado solo para pruebas autorizadas o fines educativos. BYOB es un framework de post-explotación de código abierto para estudiantes, investigadores y...

CVE-2021-44228

CVE-2021-44228-POC Yet another CVE-2021-44228 POC Affected Log4j versions: from 2.0-beta9 up to 2.14.1 Prerequisites Used Java: OpenJDK 11 https://jdk.java.net/archive/ Maven required to build apps in this repo alternatively, download prepared jar files from release: https://maven.apache.org/...

mongobleed

mongobleed CVE-2025-14847 - Explotación de fuga de memoria no autenticada en MongoDB Un exploit de prueba de concepto para la vulnerabilidad de descompresión zlib de MongoDB que permite a atacantes no autenticados filtrar memoria sensible del servidor. Vulnerabilidad Un fallo en la descompresión...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server and Confluence Data Center include a significant unauthenticated remote code execution vulnerability identified as CVE-2022-26134, according to a security advisory released by Atlassian on June 2, 2022. The vulnerability was unpatched when it was published on...

Windows-Exploitation-Web-Server-Tomcat-8.5.39-CVE-2019-0232

This repository does not have a README...

boa-detector

boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...

pyghidra-mcp

PyGhidra-MCP - Servidor del Protocolo de Contexto de Modelo para Ghidra Descripción general pyghidra-mcp es un servidor de línea de comandos del Protocolo de Contexto de Modelo MCP que lleva todo el poder analítico de Ghidra, una robusta suite de ingeniería inversa de software SRE, al mundo de lo...

dnspython

dnspython INTRODUCTION dnspython is a DNS toolkit for Python. It supports almost all record types. It can be used for queries, zone transfers, and dynamic updates. It supports TSIG-authenticated messages and EDNS0. dnspython provides both high- and low-level access to DNS. The high-level classes...