EsFileExplorer-CVE-2019-6447

EsFileExplorer-CVE-2019-6447 Exploiting Android Vulnerability in ES File Explorer Vulnerability The ES file explorer was created by ES worldwide, which is a part of DO Global and is based in China. This ES file explorer is only available for use on mobile devices that run the Android operating...

IoT-Home-Guard

The first version of the hardware tool uses the Raspberry Pi as a development platform. Users need to log in to the Raspberry Pi to launch the software tool through ssh, and then connect the IoT device to be tested to the Raspberry Pi wifi. I am designing a second version, the user only needs to...

CVE-2026-65643-PoC-Toolkit

CVE‑2026‑65643 – cPanel ドメインパーキング RCE ツールキット 倫理的な使用のみ – 許可されたセキュリティテスト このリポジトリは、許可されたセキュリティ専門家、ブルーチーム、ペネトレーションテスター のみを対象としたツールを提供します。 コンピュータシステムへの不正アクセスは、CFAA（米国）、Computer Misuse Act（英国）、TCK 243/244（トルコ）、および世界中の同様の法律 の下で違法です。 脆弱性の概要 CVE‑2026‑65643 は、cPanel & WHM バージョン 11.x...

CVE-2024-22274-RCE

권한 상승: VMware vCenter Server 인증된 RCE 📜 설명 "com.vmware.appliance.recovery.backup.job.create" 및 "com.vmware.appliance.recovery.backup.validate" API 구성 요소는 플래그 인젝션 공격에 취약하며, 이를 이용해 대상 시스템에서 root 사용자로 임의 명령어를 실행할 수 있습니다." 📚 목차 📜 설명 🛠️ 설치 ⚙️ 사용법 🔎 발견 📝 참고사항 💁 참고자료 📢 면책 조항 🛠️ 설치 및 설정 !NOTE 이 PoC 익스플로잇을...

Mass-RAT

Mass-RAT Basic Multiplatform Android phones + Windows PC Remote Administration Tool. This is my first attempt to learn xamarin.android. The project is experimental and may have errors. The project is for educational purposes only...

thorse

THorse THorse is a RAT Remote Administrator Trojan Generator for Windows/Linux systems written in Python 3. This small python script can do really awesome work. Disclaimer :computer: This project was created only for good purposes and personal use. THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRAN...

cve-2017-12945

CVE-2017-12945 CVE-2017-12945용 익스플로잇 Mersive Solstice Pods무선 협업 및 프레젠테이션 플랫폼, Mersive Technologies Inc. 설계에서 펌웨어 버전 2.8.4 미만을 실행하는 장치에 원격 인증된 블라인드 OS 명령 주입 취약점이 존재합니다. 이는 공급업체 웹사이트에서 인정/보고되었으며, 아래 스크린샷을 참조하십시오. 그 결과, 인증된 공격자는 취약한 Mersive Solstice Pods에 조작된 HTTP 요청을 보내 임의의 명령루트 권한을 실행할 수 있습니다. 이...

CVE-2020-14179

CVE-2020-14179 Sensitive data exposure via /secure/QueryComponent!Default.jspa endpoint Priority: High Affects Version/s: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names a...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

CVE-2023-2591

CVE-2023-2591: Stored HTML Injection in Item Label in Teampass 3.0.6 - M Nadeem Qazi I recently identified a security vulnerability in nilsteampassnet/teampass, a popular password management tool. This vulnerability, identified as CVE-2023-2591, is a stored HTML injection vulnerability in the ite...

Ares

Ares Ares is a Python Remote Access Tool. Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don't support nor can be held responsible for. Ares is made of two main programs: A Command aNd Control server, which...

CVE-2019-13498

CVE-2019-13498 Exploit Title: MITM - Missing HSTS causing credential theft and content manipulation Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

HPHardwareDiagnostics-PoC

HPHardwareDiagnostics-PoC HP Hardware Diagnostics의 EtdSupp 드라이버를 위한 PoC 익스플로잇 CVE-2023-32673/PSR-2022-0209 빌드 Visual Studio 2019에서 엽니다 릴리스로 빌드합니다 감탄합니다 또는 감탄하지 않습니다 요약 가상 메모리 읽기/쓰기가 가능한 아주 간단한 작은 드라이버이며, MmMapIoSpace 등은 없습니다. 고지 사항 다이어트 소다는 역겹습니다...

Mystikal

Mystikal macOS 초기 액세스 페이로드 생성기 https://github.com/its-a-feature/Mythic와 함께 사용하도록 설계되었습니다 관련 블로그 게시물: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 사용법: 1. 빌드 머신에 Xcode를 설치합니다Installer Plugin이 포함된 Installer Package에 필요 2. python 요구사항을 설치합니다 sudo pip3 install -r requirements.txt 3...

CVE-2024-34716

CVE-2024-34716PoC More technical details can be found on https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installation pip install -r requirements.txt Usage Usage: python exploit.py --url --email --local-ip --admin-path...

CVE-2021-28663

CVE-2021-28663 A basic PoC leak for CVE-2021-28663 Internal of the Android kernel backdoor vulnerability This is a basic PoC for CVE-2021-28663. A design flaw in Mali GPU Android Kernel Driver. 1. Create a GPUVA and also mmap to it so we can get virtual addr for phys pages. 2. Create an alias for...

CVE-2022-22963-Exploit

CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...

CVE-2021-42913

CVE-2021-42913 Samsung Printer SCX-6X55X Improper Access Control Samsung Printer SCX-6x55X Series SyncThru Web Service is affected by an improper access control vulnerability. The vulnerability can permit an attacker to gain access to a list of SMB users and passwords...

RendezvousRAT

정보 이 저장소는 go-libp2p-examples에서 찾은 예제를 기반으로 GO를 활용하는 두 개의 최소한의 개념 증명 RAT를 포함합니다. 현재 이 RAT는 Linux 호스트를 대상으로 합니다. 그러나 go build 변수를 수정하여 Windows용으로 빌드할 수 있습니다. Linux에서 환경 변수를 설정하여 GO가 Windows용으로 컴파일하도록 지시할 수 있습니다. "env GOOS=windows"를 설정하고 프로젝트의 명령을 "sh -c"에서 "cmd.exe /c"로 변경하세요. 이는 이후 버전에서 구현될 예정입니다...