CVE-2024-20656

CVE-2024-20656 PoC for EoP in VSStandardCollectorService150 service https://www.mdsec.co.uk/2024/01/cve-2024-20656-local-privilege-escalation-in-vsstandardcollectorservice150-service/...

peirates

Peirates 什么是 Peirates？ Peirates 是一款 Kubernetes 渗透工具，使攻击者能够提升权限并在 Kubernetes 集群中横向移动。它自动化了已知的技术来窃取和收集服务账户令牌、机密信息，获取进一步的代码执行权限，并控制整个集群。 我在哪里运行 Peirates？ 你可以从运行在 Kubernetes 上的容器中运行 Peirates，也可以在 Kubernetes 节点上、容器外部运行。 Peirates 会攻击 Kubernetes 集群吗？ 是的，它绝对会。在 Kubernetes 集群中使用此工具之前，请咨询你的律师和集群所有者。 谁创建了...

CVE-2023-22077

CVE-2023-22077 CVE Proof Of Concept: https://databasesecurityninja.wordpress.com/2025/08/04/cve-2023-22077-denial-of-service-from-pdb-level-against-container-level-dos-breaking-pdb-isolation/...

CVE-2020-1350

CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...

dheat_dos_attack_poc

DHeat DoS Attack POC CVE-2002-20001 POC for Testing the Existence of DHEat DOS Attack for CVE-2002-20001 in SSH Service Usage command: python3 dheatdosattackpoc.py : Replace with the actual IP address or hostname of the SSH server you have permission to test. : Target Port number running SSH...

CVE-2021-20294-POC

CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc download and compile wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.ver launc...

CVE-2019-0709

CVE-2019-0708 BlueKeep Exploit CVE-2019-0708 RCE and Crash Exploit using Python Crash Exploit Published Usage: python3 crashexploit.py 127.0.0.1 64 RCE Exploit Not Published Usage: python3 exploitrce.py 127.0.0.1 payload...

CVE-2020-3161

CVE-2020-3161 Cisco IP Phone 11.7 - Denial of Service PoC...

USN-8869-1 rabbitmq-server vulnerability

It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to cause a denial of service via memory exhaustion...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2024-27316_poc

CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start docker-compose up -d Connectivity check httpd v2.4.58 vulnerable curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version curl --http2 -i --head...

CVE-2026-39767

Subscriber Denial of Service Attack in WPBase Cache = 5.5.6 versions...

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

Bitrix24DoS

Bitrix24 DoS Exploit This repository contains a Python script designed to exploit a Denial of Service DoS vulnerability in Bitrix24. Please note that this script is for educational purposes only, and its use for unauthorized activities is illegal and unethical. CVE-2023-1718 CVE Identifier :...

Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to IBM Java SDK (CVE-2026-61308, CVE-2026-70907 & CVE-2026-60589)

Summary IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to IBM Java SDK. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. While the vulnerabilit...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 SSL Death Alert PoC Usage: python ssl-death-alert.py DOMAIN/IP PORT PROTOCOL-VERSIONSSLv3, TLS1.0, TLS1.1, TLS1.2 NUMBER-OF-ALERTS1000 THREADS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 More info: http://security.360.cn/cve/CVE-2016-8610/...

CVE-2019-0708

CVE-2019-0708 Blue Screen PoC Windows 7 64-bit has been tested〜 Command: python crashpoc.py ip 64 https://github.com/n1xbyte/CVE-2019-0708/ Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

mesh-kridik

mesh-kridik 增强您的 Kubernetes 服务网格安全性！！ mesh-kridik 是一个开源安全检查器，对运行 Istio 服务网格的 Kubernetes 集群执行各种安全检查，并输出安全报告。 安全检查测试完整实现了 istio 安全最佳实践。 在运行 Istio 服务网格的 Kubernetes 集群上执行安全检查，并利用 OPA（Open Policy Agent）强制执行安全规则，输出审计报告包括： 安全问题根因以及建议的修复措施。 要求 安装 快速开始 Istio 安全检查 用户插件使用 支持的规范 贡献 要求 Go 1.16+ jq istio 安装 gi...