CVE-2022-26134

pip3 install -r requirements.txt use: python3 exp.py url "cmd" example: python3 exp.py http://192.168.1.1/ whoami...

CVE-2020-8289

CVE-2020-8289 – Remote Code Execution as SYSTEM/root via Backblaze Summary Name: Remote Code Execution as SYSTEM/root via Backblaze CVE: CVE-2020-8289 Discoverer: Jason Geffner Vendor: Backblaze Product: Backblaze for Windows and Backblaze for macOS Risk: Critical Discovery Date: 2020-03-13...

CVE-2000-0649

CVE-2000-0649 CVE-2000-0649 is a low risk vulnerability that can potentially disclose the internal IP addresses of the server. Official details are here: Rapid7 CVE NIST This particular vulnerability became of interest to me because it seems to affect current NGINX and some Apache setups as well...

GodPotato

GodPotato Basado en la historia de la escalada de privilegios Potato durante 6 años, desde el principio de RottenPotato hasta el final de JuicyPotatoNG, descubrí una nueva tecnología al investigar DCOM, que permite la escalada de privilegios en Windows 2012 - Windows 2022, ahora siempre que tenga...

pwnspoof

pwnSpoof de Punk Security genera archivos de registro falsos realistas para servidores web comunes con escenarios de ataque personalizables. Cada paquete de registros es único y completamente personalizable, lo que lo hace perfecto para generar escenarios CTF y para series de entrenamiento. ¿Pued...

TLS-Scanner

TLS-Scanner TLS-Scanner es una herramienta para ayudar a pentesters e investigadores de seguridad en la evaluación de configuraciones de servidores y clientes TLS. Tenga en cuenta: TLS-Scanner es una herramienta de investigación destinada a desarrolladores de TLS, pentesters, administradores e...

CVE

CVE A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others. CVE-2026-53264 Target: Linux Kernel Version: CentOS 9 kernel version 5.14.0-721 Exploit Written By: Lee Jia Jie CVE-2025-29824 Target: Windows Common Log Fi...

CVE-2025-32433-PoC

CVE-2025-32433: Erlang/OTP SSH Unauthenticated RCE PoC This repository contains a Proof-of-Concept PoC for CVE-2025-32433, a critical unauthenticated Remote Code Execution RCE vulnerability affecting the SSH server implementation in Erlang/Open Telecom Platform OTP. This PoC is designed for...

CVE-2019-1253

CVE-2019-1253 Original Poc sent to MSRC. This issue has been fixed with September 2019 "Tuesday" regular update. Assigned to CVE-2019-1253 - Windows Elevation of Privilege Vulnerability. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1253 There are two PoCs: the one...

CVE-2017-16568

CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

OpenRelayMagic

OpenRelayMagic ╔═╗┌─┐┌─┐┌┐┌╦═╗┌─┐┬ ┌─┐┬ ┬╔╦╗┌─┐┌─┐┬┌─┐ ║ ║├─┘├┤ │││╠╦╝├┤ │ ├─┤└┬┘║║║├─┤│ ┬││ ╚═╝┴ └─┘┘└┘╩╚═└─┘┴─┘┴ ┴ ┴ ╩ ╩┴ ┴└─┘┴└─┘ Herramienta para probar relays abiertos vulnerables en servidores SMTP Características Verificar un solo objetivo/lista de dominios Puertos 587 y 465 implementados...

DECEIVE

DECEIVE DECEIVE, the DECeption with Evaluative Integrated Validation Engine , is a high-interaction, low-effort honeypot system. Unlike most high-interaction honeypots, DECEIVE doesn't provide attackers with access to any actual system. AI actually does all the work of simulating a realistic...

CVE-2021-41773

CVE-2021-41773 A Zeek package which raises notices for Path Traversal/RCE in Apache HTTP Server 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013 References https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-41773 https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-42013...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Bajo los términos del Contrato DE-NA0003525 con NTESS, el Gobierno de los EE. UU. retiene ciertos derechos sobre este software. MOSE es una herramienta de post-explotación que ayuda a los...

mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

caldera

Caldera™ Caldera™ is a cyber security platform designed to easily automate adversary emulation, assist manual red-teams, and automate incident response. It is built on the MITRE ATT&CK™ framework and is an active research project at MITRE. The framework consists of two components: 1. The core...

How-To-Secure-A-Linux-Server

Cómo asegurar un servidor Linux Una guía en evolución para asegurar un servidor Linux que, con suerte, también te enseña un poco sobre seguridad y por qué es importante. Tabla de Contenidos Introducción Objetivo de la Guía Por Qué Asegurar Tu Servidor Por Qué Otra Guía Más Otras Guías Por Hacer /...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Remote Code Execution Authenticated CVE-2025-5196 Wing FTP Server provides an administrative Lua scripting console accessible via its web interface. Authenticated administrators are able to execute arbitrary Lua code with insufficient sandboxing. Affected Version: Wing FTP...