CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Description : Exploiting a Cross-site request forgery CSRF attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2025-5781

FreePBX CVE-2025-57819 Exploit Description This script exploits a vulnerability in FreePBX versions prior to 16.0.26.0 CVE-2025-57819, allowing remote attackers to execute arbitrary PHP code via a SQL injection flaw in the AJAX API endpoint. The exploit creates both a webshell and an auto-trigger...

TryHack3M-Bricks-Heist

TryHack3M: Bricks Heist Exploit • Writeup • CTF Challenge A comprehensive repository containing a custom exploit and detailed writeup for the TryHack3M: Bricks Heist challenge Quick Start • Repository Structure • The Exploit • The Writeup • Disclaimer Overview This repository documents the...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

CVE-2018-10933

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

CVE-2019-0708-EXP-Windows

CVE-2019-0708-EXP-Windows-Version Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activities, the author is not responsible. Table of Contents toc Introduction CVE-2019-0708-EXP-Windows version runs as a single executable file, no need for Linux, Pytho...

revsh

revsh revsh is a tool for establishing reverse shells with terminal support, reverse VPNs for advanced pivoting, as well as arbitrary data tunneling. News 2018-08-09 : New release. Mosly bug / stability fixes and better documentation on the build process with OpenSSL 1.1.0. See the Installation...

CVE-2020-7247

CVE-2020-7247 This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtpmailaddr” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user How to use? python3 getShell.py If you need a reverse shell then run it...

CVE-2024-36057

CVE-2024-36057 — Koha Library Software CVE ID: CVE-2024-36057 製品: Koha Library Software 脆弱性タイプ: OSコマンドインジェクション CWE-78 CVSSスコア: 8.7 高 認証済み 影響を受けるバージョン: 22.05.22未満 クレジット: Karolis Narvilas 説明...

CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - Image Remote Code Execution Exploit of CVE-2019-8942 and CVE-2019-8943 using python : ExploitDB : https://www.exploit-db.com/exploits/49512 The original exploit for metasploit : WordPress Core 5.0.0 - Crop-image Shell Upload Metasploit :...

Project-CVE-2026-50751

CVE-2026-50751 IKEv1 セキュリティテスト 説明 このPythonスクリプトは、Check Point IKEv1 VPNの認証バイパス脆弱性であるCVE-2026-50751を標的とするように設計された、攻撃的なセキュリティテストフレームワークです。 機能 UDPポート500上のIKEv1 VPNサービスを対象にIPアドレスをスキャン Check Point VPNゲートウェイの識別を試行 認証バイパスのテストを主張する、細工されたIKEv1パケットを送信 内部ネットワーク探索機能を含む リバースシェルリスナーおよびペイロード生成機能を含む 重要な注意事項...

CVE-2026-23744-PoC

CVE-2026-23744-PoC 면책 조항: 이 개념 증명은 오직 승인된 보안 연구, 교육 목적, 그리고 통제된 실험실 환경예: HTB, CTF 또는 명시적 서면 동의를 받은 내부 침투 테스트에서만 사용하도록 제공됩니다. 허가 없이 어떤 시스템을 대상으로 한 무단 사용은 불법이며 비윤리적입니다. 작성자는 오용에 대해 어떠한 책임도 지지 않습니다. 사용자는 모든 해당 법률 및 규정을 준수할 전적인 책임이 있습니다. 설명 CVE-2026-23744 는 MCPJam Inspector버전 ≤ 1.4.2의 인증되지 않은 명령 주입...

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...

C99Shell-PHP7

. . . / / \ / /| | | | | | \ \ \ \ / \ /\ / \ \ | | / | | | | \ / / / / / /\ \ \ \ / / / / / | Y \ /| || | \ / / \ \ / \ \ // // / /|| /\ // / /\ \ \ /\ \ / / / / / / / / / | | | \ \ / / | | / | / | | | | | \ \ /\ / /| || || | / / | ' | | | | | / | ' \ / | | | \ / / / | || | / /...

CVE-2024-24576-Exploit

CVE-2024-24576-Exploit The Command::arg and Command::args APIs state in their documentation that the arguments will be passed to the spawned process as-is, regardless of the content of the arguments, and will not be evaluated by a shell. This means it should be safe to pass untrusted input as an...

revshellgen

🚀 RevShellGen 리버스 셸 생성기 스타일리시하게 리버스 셸 생성을 자동화하세요 번거로움 없이 리버스 셸을 생성, 인코딩, 캐치하세요 기능 • 설치 • 사용법 • 셸 유형 • 기여하기 📖 소개 RevShellGen 은 리버스 셸 명령어 생성을 간소화하는 강력한 CLI 도구입니다. 더 이상 구문을 찾거나, 수동으로 인코딩하거나, 설정에 골머리를 썩지 마세요. 이 도구가 직관적인 인터페이스로 모든 것을 처리합니다. 🎯 주요 기능 🖥️ 대화형 CLI - 사용자 친화적인 메뉴 기반 인터페이스 🔄 자동 인코딩 - URL 및...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

relayer

Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...

pixload

pixload -- Image Payload Creating tools DESCRIPTION Set of tools for hiding backdoors creating/injecting payload into images. The following image types are currently supported: BMP, GIF, JPG, PNG, WebP. about Useful references for better understanding of pixload and its use-cases: Bypassing CSP...