mpDNS

mpDNS aka multi-purpose DNS Server Simple, configurable DNS Server with multiple useful features Python 3 names.db - holds all custom records see examples Simple wildcards like .example.com Catch unicode dns requests Custom actions aka macro: shellexec::dig google.com +short - Execute shell comma...

CVE-2024-24576-PoC

CVE-2024-24576 PoC The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

CVE-2025-24813-apache-tomcat

CVE-2025-24813 Plantilla Nuclei CVE-2025–24813 nuclei -l list.txt -t CVE-2025–24813.yaml ejecutar shell http://target.com/updates.jsp?cmd=whoami...

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2025-53652: Vulnerabilidad de entrada no validada en el plugin Git Parameter de Jenkins. Resumen Esta vulnerabilidad surge porque la entrada controlada por el usuario procedente de los parámetros de build de Jenkins se inyecta de forma insegura en el comando de checkout de Git. La entrada del...

CVE-2024-48705

Resumen Durante una reciente investigación de seguridad para el Wavlink AC1200 Modelo: WL-WN532A3, se identificó una vulnerabilidad de inyección de comandos posterior a la autenticación en el endpoint "/cgi-bin/adm.cgi". Esta vulnerabilidad podría permitir que actores malintencionados que hayan...

cve-2022-33891-fix

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 2023 Tópico: CVE-2022-33891 Execução de comandos shell arbitrários em aplicação spark que utiliza autenticação via ACL Alunos Elinilson Vital Leoarndo Bozzetto CVE-2022-33891 Patch Instructions for Ubuntu 22.04 Prerequisites Ubuntu 22.04...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

CVE-2025-69604

CVE-2025-69604 Description This vulnerability is similar to the one that is described in CVE-2025-61229 – an attacker can edit the task template to get SuperDuper backup tasks to install an arbitrary package. The package can then run shell scripts as the root user and with the highest level of...

CVE-2020-1938

cve-2020-1938 1.read file： python3 tomcat.py URL -f /WEB-INF/web.xml example: python3 tomcat.py 127.0.0.1 -f /WEB-INF/web.xml -p 8090 2.excute shell add --rec 1 refere: https://www.t00ls.net/articles-55062.html...

CVE-2024-24576-Exploit

CVE-2024-24576-Exploit The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

EggShell

EggShell About EggShell is a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location...

CVE-2026-26331

Inyección Arbitraria de Comandos a través de --netrc-cmd en yt-dlp Gravedad: Alta CVSS 8.8 Software Afectado: yt-dlp = 2023.06.21, Corregido en: 2026.02.21 Aviso: GHSA-g3gw-q23r-pgqm CVE: CVE-2026-26331 Resumen La opción de línea de comandos --netrc-cmd de yt-dlp o el parámetro netrccmd de la API...

vBulletin-5.x-0day-pre-auth-RCE-exploit

vBulletin-5.x-0day-pre-auth-RCE-exploit Versiones afectadas: vBulletin 5.0.05.5.4 poc a continuación: !/usr/bin/python vBulletin 5.x 0day pre-auth RCE exploit This should work on all versions from 5.0.0 till 5.5.4 Google Dorks: - site:.vbulletin.net - "Powered by vBulletin Version 5.5.4" import...

rdroid

Este proyecto no está mantenido actualmente, pero tan pronto como tenga tiempo probablemente en los próximos meses, se arreglará para que funcione. rdroid ¡Gestiona tu teléfono Android de forma remota, también conocido como RAT! Historia Trabajé en este proyecto durante la secundaria, en el año...

BlackNET

BlackNET 😈 Botnet de Windows gratuito, avanzado y moderno con un panel PHP bonito y seguro desarrollado con VB.NET. Acerca de BlackNET 🤓 Botnet de Windows gratuito, avanzado y moderno con un panel PHP bonito y seguro construido con VB.NET. Este controlador de botnets viene con muchas funciones y ...

CVE-2015-3306

CVE-2015-3306 ProFTPD Exploit This repository contains a Python proof-of-concept PoC exploit for CVE-2015-3306 ⚠️ Warning: Only use this against systems you own or have explicit permission to test. Unauthorized exploitation is illegal. Author Mohamed EL-KHAROUATI Part 1: CVE-2015-3306 ProFTPD...

CVE-2026-91097-CVE-2026-91106

🔬 Únete a Telegram para las últimas investigaciones de vulnerabilidades y lanzamientos de exploits HPLIP Printer Application — Toma de control administrativa sin autenticación Herramienta de explotación masiva dirigida a la HPLIP Printer Application interfaz web basada en PAPPL en todas las...

CVE-2025-27590

CVE-2025-27590 - PoC Exploit Command Injection via Multipart Form Upload 📌 Description This is a Proof-of-Concept PoC exploit for CVE-2025-27590 , a command injection vulnerability affecting web applications that process multipart file uploads without proper sanitization. The vulnerability allows...

CVE-2022-33891

CVE-2022-33891 - Apache Spark Command Injection Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author AkbarTrilaksana Description The Apache Spark UI offers the possibility to enable ACLs via the...

CVE-2022-3552

CVE-2022-3552 In order to exploit the vulnerability in BoxBlilling, the version will have to be: "BoxBilling=4.22.1.5" and you will have to have valid admin credentials. If you have the situation above, here are the steps you have to take in order to get the juicy RCE: Create a python virtual...