Offensive-Security-KnowledgeBase

Offensive-Security-KnowledgeBase Str...

exploit-notes

🎯 Pentest Playbook Index Welcome to the comprehensive penetra...

📄 SmarterMail 100.0.9413 GUID File Remote Code Execution

This PHP code implements a fully automated remote exploitation framework targeting SmarterMail version 100.0.9413. It is designed to identify the service, determine the underlying operating system, abuse a file upload mechanism with path traversal, and achieve arbitrary file write leading to remo...

ctf-writeups

CTF Writeups A collection of Capture The Flag challenge write...

Ofensive-security-Portfolio

This repository contains my Offensive Cyber Security / Penetrati...

Ofensive-security

This repository contains my Offensive Cyber Security / Penetrati...

ctf-skills

ctf-skills Claude Codehttps://docs.anthropic.com/en/docs/c...

nightfury

NightFury Framework Version 2.0 | Professional Red Team Ope...

CyberSec-PAF-CTF-2026-writeup

CyberSec PAF CTF 2026 🚩 Hosted by the PAF-IAST Cyber-Sec So...

ethical-hacking-excersises

Exploitation Techniques – Course Exercises Repository Over...

Vegeta_Vuln_lab

VegetaVulnlab Overview This lab focuses on core penetrati...

Network-Penetration-Testing-CTF-1-Flag-4

exploit usage: proxychains python3 spipexploit.py -u http://w...

cve_repo

It is an offensive tool for web exploitation. This repository co...

CVE-2025-2859

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user...

JFinalOA 安全漏洞

JFinalOA is an enterprise office system developed on the JFinal framework by rabbit individual developers. A security vulnerability exists in JFinalOA versions prior to v2025.01.01. An attacker exploiting this vulnerability could execute arbitrary web script or HTML via a specially crafted payloa...

CVE-2024-21014

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications component: Simphony Enterprise Server. Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Exploit for Unrestricted Upload of File with Dangerous Type in Cutephp Cutenews

sadnews CuteNews 2.1.2 - CVE-2019-11447 Proof-Of-Concept POC...

selfpoc

It is an offensive tool for web exploitation. The repository con...

Palo Alto Networks PAN-OS 跨站脚本漏洞

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A cross-site scripting vulnerability exists in Palo Alto Networks PAN-OS, which stems from the lack of effective filtering and escaping of user-supplied data in the Captive Portal feature, and can be...

LearnPress Plugin < 4.2.0 - Subscriber+ SQLi

The plugin does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks Note: The original advisory mentioned that the issue is only exploitable by contributors, b...