spring4shell-poc

Spring4Shell POC Descripción de la vulnerabilidad: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Construcción del POC: https://github.com/BobTheShoplifter/Spring4Shell-POC Pasos para construir/ejecutar Probado con JDK 11.0.14, Spring Boot 2.6.5 y Apache Tomcat 9.0.6...

MAL-2026-17779 Malicious code in airdrop-eligibility-check (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3461788cd7b809ba613c07b39b583fb968ce927ccfc15433673e2731ca68d8 The gem's extconf.rb, executed during gem install, decodes a base64 Ruby payload and eval's it inside a detached double-forked Process.setsid child...

MAL-2026-17781 Malicious code in btc-fee-estimator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload open...

MAL-2026-17783 Malicious code in defi-yield-calculator (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8b3e50479b61d2ff6e2f5a19de20473cf8fc3c91f99945aff51f112a617192 The gem ships an ext/extconf.rb that base64-decodes an embedded Ruby payload and runs it via eval inside a double-forked, detached, stdio-nulled...

ProFTPD_CVE-2015-3306

m4ud ProFTPD 1.3.5 RCE exploit CVE : 2015-3306! ProFTPd 1.3.5 RCE Usage: ProFTPD.py options Options: -h, --help show this help message and exit -l LHOST, --lhost=LHOST Local IP Required for Reverse Shell, -p LPORT, --lport=LPORT Port Required for Reverse Shell, -t TARGET, --target=TARGET Vulnerab...

RCE-CVE-2025-3248

Authenticated CVE-2025-3248 Langflow Remote Code Execution This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit. Features Authenticated Command Execution: Run arbitrary system comman...

CVE-2020-35713

Description Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page. How to use Step 1: Modify the IP address in cve-2020-35713.py file to the target address Step 2: Run the...

CVE-2023-5360

CVE-2023-5360 An Open-source EXPLOIT for The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. Table of Contents Introduction Features Usage...

fusionpbx_rce_vulnerability

Prelude This simple code tries to complete the implementation of the chained vulnerability introduced by Dustin Cobb at RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE Reproduction Steps 1. View the vulnerable operator screen in a web browser, located in this example at...

cve-2025-32463-lab

CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab This repository contains a Docker-based lab and proof-of-concept exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 to 1.9.17. 🚨 Disclaimer This code is for educational and authorized testing...

rsg

Generador de Reverse Shell - rsg Una herramienta para generar varias formas de hacer un reverse shell Ejemplo de uso Fuentes de Reverse Shell http://bernardodamele.blogspot.com.br/2011/09/reverse-shells-one-liners.html http://pentestmonkey.net/cheat-sheet/shells/reverse-shell-cheat-sheet...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py...

CVE-2023-38831_ReverseShell_Winrar

CVE-2023-38831 In this case, I share the necessary files to exploit this vulnerability in WinRAR, with which we can create a malicious PDF to establish a reverse shell to our attacker machine. ⚠️ NOTE: This content is shared for ethical purposes and is created to practice in controlled environment...

CVE-2023-5360

CVE-2023-5360 CVE-2023-5360 Auto Shell Upload WordPress Royal Elementor 1.3.78 Shell Upload...

Bluekeep-Metasploit-Lab-Project

Exploiting BlueKeep CVE-2019-0708 on Windows 7 Objective Gain remote access to an unpatched Windows 7 system via the BlueKeep RDP vulnerability using Metasploit. Lab Setup Attacker: Kali Linux Target: Windows 7 Unpatched, RDP Enabled Network: NAT / Host-Only Tools Used Metasploit Framework Kali...

CVE-2024-50379

CVE-2024-50379 Proof of Concept PoC This repository contains a proof of concept PoC script to exploit CVE-2024-50379 , a vulnerability in Apache Tomcat. The vulnerability is a Time-of-Check Time-of-Use TOCTOU race condition that can lead to remote code execution RCE if the server's configuration...

CVE-2020-14295

CVE-2020-14295 Vulnerability details - https://github.com/Cacti/cacti/issues/3622 Install pip3 install -r requirements.txt Usage $ ./gimme-a-shell.py --help usage: gimme-a-shell.py -h -t Target -U Username -P Password -i Shell-IP -p Shell-Port optional arguments: -h, --help show this help message...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upload This Python script exploits CVE-2023-27372, an unauthenticated remote code execution vulnerability in SPIP CMS versions prior to 4.2.1. It leverages a cache poisoning flaw in the password reset mechanism to upload a web shell and...

Cgi-bin_bash_Reverse

Cgi-binbashReverse POC for CVE-2014-6271 Src:https://gist.github.com/matjohn2/bc9689c60d4c9c5a2538...

staystaystay

staystaystay staystaystay es un exploit de prueba de concepto para CVE-2021-1585, un problema de RCE de intermediario o punto final malicioso que afecta a Cisco ASA Device Manager ASDM. El problema fue descubierto originalmente por Malcolm Lashley y divulgado en el verano de 2021. Sin embargo, en...