Malicious code in evm-tx-decoder (RubyGems)

Source: amazon-inspector e478aa0270779720106fc6169e89fde089af352214fc720fbf8c284d51415f59 The gem's native-extension build script ext/extconf.rb decodes a base64-embedded Ruby payload and executes it via eval inside a double-forked, detached child Process.setsid, Process.detach. The payload opens...

Malicious code in eth-gas-oracle (RubyGems)

Source: amazon-inspector 0f6cd8a676acbc17559b87ede98a030f26837472a482763f1e8a4818da65659d The gem's native extension build script ext/extconf.rb base64-decodes an embedded Ruby payload and executes it via eval inside a double-forked, detached child during gem install. The decoded payload opens a...

Malicious code in gas-refuel-bridge (RubyGems)

Source: amazon-inspector 37bd99ebd0f028669dafee3405a3ac4ebb9e264b7d9bfce963e68b259dfe88a3 The gem's native extension build script extconf.rb base64-decodes an embedded Ruby payload and eval's it during gem install. The payload double-forks a detached background process that sleeps for 20-40 minut...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki Remote Code Execution Exploit PoC for CVE-2025-24893 – XWiki Macro Remote Code Execution Inspired by Artemir's original PoC Description This is a Proof-of-Concept PoC exploit for CVE-2025-24893 , a Remote Code Execution RCE vulnerability in vulnerable versions of XWiki. The...

wshlient

Wshlient Cliente de Web Shell Descripción y Demo Wshlient es un cliente de web shell diseñado para ser bastante simple pero versátil. Solo necesitas crear un archivo de texto que contenga una solicitud HTTP e indicar dónde Wshlient inyecta los comandos, luego puedes disfrutar de una shell...

CVE-2025-55182

CVE-2025-55182 This repository contains documentation related to the CVE-2025-55182 React2Shell vulnerability The documentation is available: as a website: https://memergamer.github.io/CVE-2025-55182/ as a PDF main.pdf: https://github.com/MemerGamer/CVE-2025-55182/releases...

bugstropics

Hunting Bugs in the Tropics This is a repo with the slides used in my presentation "Hunting Bugs in the Tropics" at DEFCON30. It includes the Python script used to calculate the support password based on the private key obtained by breaking Aruba support's EC public key, due to its weak size 64...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 Authenticated RCE This repository contains a proof of concept exploit for CVE-2021-43857 , a Remote Code Execution vulnerability affecting Gerapy -p -L -P Requirements 1. Python 3.x 2. requests and pyfiglet pip install requests pyfiglet 3. Netcat nc...

ruler

Introducción Ruler es una herramienta que te permite interactuar con servidores Exchange de forma remota, a través del protocolo MAPI/HTTP o RPC/HTTP. El objetivo principal es abusar de las características del lado del cliente de Outlook y obtener una shell de forma remota. Todos los detalles sob...

CVE-2020-0910

CVE-2020-0910 Working Exploit PoC CVE-2020-0910 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

wifi-hacker

Script de shell para atacar conexiones inalámbricas utilizando herramientas integradas de Kali. Soporta todos los tipos de seguridad WEP, WPS, WPA, WPA2 !Imagenhttps://assets.kitploit.com/production/public/readmes/placeholders/f0fc86cfe65f76d40e15aaec61704ec8220a56dc89d4be...

payday

Payday Generador de payloads que utiliza Metasploit y Veil. Toma la dirección IP como entrada y luego construye payloads automáticamente. Llama al framework Veil con la dirección IP proporcionada y crea binarios y handlers. Utiliza msfvenom para crear payloads y escribe archivos de handlers de...

shellshock

shellshock scripts associated with bourne shell EVN function parsing vulnerability CVE-2014-6271 dhcpmon.py - This script monitors DHCP frames for potentially malicious characters within BOOTP and DHCP reply fields...

CVE-2024-47533-PoC

CVE-2024-47533 – Cobbler XMLRPC Authentication Bypass → Reverse Shell Unauthenticated RCE 📌 Summary This repository contains a Proof-of-Concept PoC exploit for CVE-2024-47533 , a critical authentication bypass in Cobbler's XMLRPC API that leads to unauthenticated remote code execution RCE. The...

CVE-2024-29510

Original research and POC code: https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/ NOTE: I have made no changes to the POC apart from the command executed. Full credit goes to Thomas Rinsma @ Codean Labs for their amazing research and POC. Local Scenario 1...

penelope

Penelope es un moderno manejador de shells para pentesters y jugadores de CTF. Proporciona una alternativa más capaz a los oyentes básicos de netcat, añadiendo actualización automática de PTY, gestión de sesiones, registro, transferencias de archivos y módulos auxiliares. Tabla de contenidos 📥...

CVE-2015-8351

gwollebuster this script is exploit for wordpress old plugin gwolle usage: ./gwollebuster.py first arguments = your target url of wordpress that installed gwolle second arguments = your ip third arguments = listening port for reverse shell example: ./gwollebuster.py http://vulnpress.com/...

CVE-2024-52402

🚀 Exploit for CVE-2024-52402: WordPress Exclusive Content Password Protect Plugin -un -p 🛠️ Options usage: CVE-2024-52402.py -h -u URL -un USERNAME -p PASSWORD Exploit for ECVE-2024-52402 By | Nxploit, Khaled ALenazi options: -h, --help show this help message and exit -u, --url URL Target WordPres...

usbhijacking

CVE-2017-8464 PoC Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via ...

CVE-2023-46818

CVE-2023-46818 PoC This is a python implemntation of the PoC provided by Egidio Romano aka EgiX Over here, this exploit will prompt you a webshell, for a fully interactive shell execute a command and send yourself a reveseshell. Usage python exploit.py http://localhost username password Disclaime...