704639 matches found
serverless-prey
Puma Security Serverless Prey Serverless Prey is a collection of serverless functions FaaS, that, once launched to a cloud environment and invoked, establish a TCP reverse shell, enabling the user to introspect the underlying container: Panther: AWS Lambda written in Node.js Cougar: Azure Functio...
spring4shell-local-verification-lab
Spring4Shell Local Impact Condition Verification, Remediation, and Re-testing Project Project Introduction This project is used for learning and verifying the impact conditions, risk manifestations, remediation methods, and post-remediation re-testing procedures for Spring Framework CVE-2022-2296...
ivanti-cve-2023-35080-privilege-escalation-bof
Ivanti Connect Secure VPN Privilege Escalation Ivanti Secure Access previously Pulse Secure privilege escalation Cobalt Strike BOF CVE-2023-35080. Exploit by Alex and BOF by Tijme. Made possible by Northwave Cyber Security Description This is a Cobalt Strike CS Beacon Object File BOF and executab...
zyxel-p870hn-hardware-hacking
From a bare PCB to root: hardware-hacking a ZyXEL P-870HN over UART Two phone photos of an unlabeled router board → serial console → auth bypass → root shell — reproducing the real, still-unpatched chain CVE-2025-0890 hidden supervisor account + CVE-2024-40891 CLI command injection on hardware I...
TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028...
TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...
TYPO3-EXT-SA-2026-033: Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...
TYPO3-EXT-SA-2026-035: Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...
TYPO3-EXT-SA-2026-031: Broken Access Control in extension "Analytics" (analytics)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...
TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...
CVE-2024-50251-PoC
CVE-2024-50251-PoC Just a local Dos bug in Linux kernel...
React2shell-CVE-2025-55182-Exploit
This repository does not have a README...
CVE-2024-21345
Usage - python3 CVE-2024-21345.py All kernel is exploitable Get root access easily...
CVE-2024-57725
CVE-2024-57725: GPON Link Manipulation Vulnerability in certain Arcadyan Routers Distributed by Orange and Jazztel This repository documents an unauthenticated vulnerability discovered in LiveboxFibra Arcadyan routers distributed by Orange and Jazztel in Spain PRV3399BBLT. The issue lies in the...
aws_pwn
AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...
warcannon
WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...
CVE-2016-5734-docker
CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 Remote Code Execution Vulnerability CVE-2016-5734 Setup git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 exploit python3 cve-2016-5734.py -u root --pwd="root"...
wordpress-jetpack-broken-access-control-vulnerable-application
wordpress-jetpack-broken-access-control-vulnerable-application This is a vulnerable application to test the exploit for the Jetpack 13.9.1 broken access control CVE-2024-9926. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a...
CVE-2026-24061
CVE-2026-24061 Vulnerability Batch Detection Tool ⚠️ Note : CVE-2026-24061 GNU Inetutils is a classic set of network tools provided by the GNU project, which includes the telnetd service, i.e., the Telnet server daemon. In versions 1.9.3 through 2.7, the telnetd service has a fatal flaw in the use...