CVE-2024-27198

EN GenTeamCityExploit is a PoC tool that targets a vulnerability in the TeamCity server CVE-2024-27198. It enables the discovery of a TeamCity version and the creation of a new admin user by exploiting an authentication bypass flaw. Features Extracts the version of the TeamCity server. Checks for...

url-tracker

URL Tracker v0.5.0 URL Tracker is a robust and scalable web application designed to monitor and track URLs, log changes, and provide detailed insights into the status and behavior of various web resources. Built on top of Sails.js, this application is perfect for tracking URLs for uptime, content...

EDR-GhostLocker

GhostLocker: AppLocker-Based EDR Neutralization Introduction After my article on Fairy-Law , where I used kernel mitigations to disable Endpoint Detection & Response EDR solutions, diversenok pointed out that IFEO exclusions Image File Execution Options were too invasive for third-party...

CVE-2021-43032

CVE-2021-43032 In XenForo ≤ 2.2.7, a threat actor with access to the admin panel can save cross-site scripting payloads in any function within the application that accepts HTML code. A payload placed within the 'Advertising' functionality will execute globally on the client side, allowing for...

CVE-2023-41425-wonderCMS_RCE

CVE-2023-41425-wonderCMSRCE Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. For educational purposes only Requires knowledge of loginURL, admin access or the...

vanda-CVE-2025-3102

Vanda CVE-2025-3102 💣 Exploit with graphical interface for vulnerability CVE-2025-3102 in the WordPress plugin SureTriggers = 1.0.78. 🚀 FEATURES Vulnerability site identification 🕵️‍♂️ Automatic exploitation with admin user creation 👨‍💻 Cyberpunk-style graphical interface 🌌 Results saved in .txt...

CVE-2024-41958-PoC

CVE-2024-41958-PoC This is a small proof of concept for CVE-2024-41958. It is possible to bypass the TFA authentication on the admin panel. Affected versions: 2024-07 Prerequisites needed for the CVE to function: Password and username for an account without TFA. Password and username for an accou...

PrivExchange

PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...

Admin-Scanner

Admin-Scanner Website Admin Panel Finder How To Install? Linux/pc sudo apt install python3 sudo apt install python3-pip sudo apt install git git clone https://github.com/alienwhatever/Admin-Scanner.git cd Admin-Scanner How to Install? Termux/Android pkg update && pkg upgrade pkg install python3 p...

CVE-2018-19410-POC

CVE-2018-19410-POC Proof of concept for the vulnerability CVE-2018-19410 Details PRTG Network Monitor Version: 18.2.39.1661 and earlier Severity level: High Impact: Authentication Bypass, Improper Authorization, Local File Inclusion Access Vector: Remote The vulnerability permits remote and...

wsuks

wsuks Automating the WSUS Attack Gaining local administrative access to a domain-joined Windows machine is typically the first step during a penetration test. In many cases, the Windows Server Update Service WSUS is configured to deploy updates to clients over the local network using HTTP. Withou...

CVE-2025-2825-CrushFTP-AuthBypass

🚨 CVE-2025-2825 – CrushFTP Authentication Bypass 🔎 Overview CVE-2025-2825 is a critical authentication bypass vulnerability affecting CrushFTP , a widely used secure file transfer server. The flaw allows remote attackers to bypass login authentication and gain administrative access by spoofing...

CVE-2021-44103

CVE-2021-44103 A proof of concept for KONGA 0.14.9 - Privilege Escalation. Intro On November 16, 2021, Fabrício Salomão and I found a vulnerability in Konga API Gateways, allowing any authenticated user to become an administrator. Report Vulnerability Product: KONGA Model: 0.14.9 Vulnerability:...

Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

CVE-2023-22432

CVE-2023-22432 PoC verification of web2py vulnerability CVE-2023-22432 A vulnerability CVE-2023-22432 in web2py was disclosed on Jan 31, 2023 US time. This article describes our discussion of this vulnerability and the results of our verification. Vulnerability Summary This vulnerability is an op...

ad-autopwn

AD AutoPwn Zero-Auth to Domain Admin — Automated Active Directory Attack Chain A fully automated penetration testing tool that chains 25+ attack techniques to compromise Active Directory environments. Designed for authorized security assessments. /\ | \ /\ | | | \ / | | | / \ || | / \ /\ V V / ' ...

CVE-2022-0952

CVE-2022-0952 Sitemap by click5 1.0.36 - Unauthenticated Arbitrary Options Update Description The plugin does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the plugin. As a result, unauthenticated...

WP-GDPR-Compliance-Plugin-Exploit

Exploit of Vulnerability CVE-2018-19207 in WP GDPR Compliance Plugin WordPress This python script creates a user with role admin. Change the varbiables baseurl, username, email for your specific case. A working email is needed, because an email is sent to this adress in order to setup a password...

Fast-Google-Dorks-Scan

Fast Google Dorks Scan The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated. Usage example: chmod +x...

RemotePotato0

RemotePotato0 UPDATE 21-10-2022: The main exploit scenario RPC- LDAP of RemotePotato0 has been fixed. More details at -- https://twitter.com/splintercode/status/1583555613950255104 Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that...