cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2019-2725

CVE-2019-2725 CVE-2019-2725 CNVD-C-2019-48814, WebLogic wls9-async Command Echo 10.3.6 12.1.3 ResultBaseExec.java Used for testing defineClass. It will recover the malicious class from base64 and execute the code, mainly for convenience optional. JDK7u21.java Generates the XML in...

plecost

Plecost Professional WordPress Security Scanner Async-first, library-friendly, no external API required. Table of Contents What is Plecost? Plecost vs WPScan Quick Start Installation CVE Database CVE Detection Engine Scanning Detection Modules WooCommerce Security WP eCommerce Security Output...

cve-tarmageddon

CVE-2025-62518: TARmageddon This repository demonstrates a critical bug in tokio-tar and related async Rust tar libraries where PAX extended header size overrides are not applied before calculating the next header position. Bug Summary Root Cause: When processing tar files with PAX extended heade...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...

CNVD-C-2019-48814

CNVD-C-2019-48814 WebLogic wls9-async Deserialization Remote Command Execution Vulnerability Echo PoC for WebLogic Patch update: https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html Vulnerability Reproduction: http://10.10.20.166:7001/async/AsyncResponseService cu...

CVE-2024-6387

转载原文 CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's...

async-pico-hub

Async PICO HUB Async PICOs is a framework for running long-lived, event-driven Beacon Object Files inside a Cobalt Strike Beacon process. It provides asynchronous execution, task tracking, graceful shutdown, and safe asynchronous output by combining Crystal Palace PICOs with a Beacon-side executi...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

CVE-2024-6387-Updated-x64bit

CVE-2024-6387-Updated-x64bit Private x64 RCE exploit Python for CVE-2024-6387 02.07.2024 from exploit.in The repository provides a working variant of the CVE-2024-6387 vulnerability exploit with support for real-time active shell, multithreading, entering targets from a file, and color output. 🔥...

CVE-2024-6387

CVE-2024-6387 a signal handler race condition in OpenSSH's server sshd Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe...

ApiHunter

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. 🎯 ApiHunter 📺 Video Demo Click to watch the full demo on YouTube 🖥️ Desktop App...

fernmelder

fernmelder async mass DNS resolver...

rsyscall

Summary rsyscall is a library which provides a interface to an ever-growing subset of Linux system calls. This interface is: process-independent : all system calls are called as methods on process objects, which can refer to the "local" process or to other processes under our control, possibly on...

CVE-2025-29927

CVE-2025-29927 Async Python scanner for Next.js CVE-2025-29927. Uses aiohttp & aiofiles to efficiently process large URL lists, detect vulnerabilities, and save results. Features connection pooling, caching, and chunked processing for fast performance...

CVE-2023-6702

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace CVE-2023-6702 Summary This vulnerability allowed a remote attacker to execute arbitrary code inside the Chrome renderer process. There was an insufficient type check in the async stack trace handling code. It leads to a type confusi...

Langflow-cve-2026-33017-exploit

Langflow RCE Exploitation Framework CVE-2026-33017 · Authorized security testing for Langflow remote code execution Research & red-team tooling for validating CVE-2026-33017 against Langflow instances you are explicitly authorized to assess. Not for unauthorized use. Disclaimer This project is...

qscan

Quick Network Scanner Quick Network Scanner project includes: qscan: a rust library for asynchronous network ports scanning see README. qsc: a command line utility built on top of qscan library for quick network scanning activities see README. NOTE: in order to properly use the library and the...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...