3286 matches found
CVE-2024-7456scripts
Some simple scripts to help exploit SQLi using both bash and Node.js based on CVE-2024-7456 https://nvd.nist.gov/vuln/detail/CVE-2024-7456...
debian-lenny-bash_3.2.52-cve-2014-6271
debian-lenny-bash3.2.52-cve-2014-6271 Debian Lenny Bash packages with cve-2014-6271 patches i386 and amd64 You can test the flaw by running: env x=' :;; echo vulnerable' bash -c "echo this is a test"...
CVE-2014-6271_pwnable
CVE-2014-6271 CVE-2014-6271 is a critical vulnerability known as "Shellshock", discovered and disclosed in 2014. This vulnerability was found in the Bash shell and affects almost all Unix and Linux systems, making it one of the most widely known vulnerabilities on the internet. Security Threat Th...
springhound
springhound Created after the release of CVE-2022-22965 and CVE-2022-22963. Bash script that detects Spring Framework occurrences in your projects and systems, allowing you to get insight on versions used. Unpacks JARs and analyzes their Manifest files. Usage: ./springhound.sh rootdirectory...
TimeInjector
TimeInjector Time injector is a CVE-2018-14714 exploitation script in bash To tell if the target is vulnerable, the script works by first checking if the target is accessible and if it can establish a login session. After that, it checks for the existence of specific pages and performs a time-bas...
CVE-2020-7384
CVE-2020-7384 This is an exploit made in bash for CVE-2020-7384. It is a modification of nikhil1232's code here: https://github.com/nikhil1232/CVE-2020-7384/blob/main/CVE-2020-7384.sh My goal was to make the exploit easier to run, along with adding a few QOL improvements. Usage bash CVE-2020-7384...
CVE-2014-6271
CVE-2014-6271 Bash Shellshock and Aftershock Tester for Ansible 1. Install Ansible http://docs.ansible.com/introinstallation.html 2. Add servers to inventory file example: username@ip 3. Copy your public key to remote servers' .ssh/authorizedkeys 4. execute test $ ansible-playbook -i inventory...
CVE-2014-5284
CVE-2014-5284 Bash implementation of CVE-2014-5284 Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Python is nice but doesn't work all the time Exploit Author: mbadanoiu Python Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...
CVE-2023-23752
CVE-2023-23752 A bash script that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7 through the use of curl and automation. Testing Environment Tryhackme: https://tryhackme.com/r/room/joomify...
detect-log4j-exploitable
CVE-2021-44228 An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. This script will help to detect log4j exploit from the running process. It helps to find if any system is exploitable ...
CVE-2020-9484
CVE-2020-9484 Bash POC for CVE-2020-9484 that i used in tryhackme challenge...
CVE-2022-22963-Poc-Bearcules
CVE-2022-22963-Poc-Bearcules This is a POC for CVE-2022-22963 I wrote this in bash. I am new to Scripting and this is my first Script Disclaimer I am not Responsible for any miss use or abuse when using this POC . for learning and educational purposes only Thank You...
POC-CVE-2025-68613
Описание PoC-эксплойт для аутентифицированной RCE-уязвимости N8N CVE-2025-68613 Использование python3 poc.py -u -c...
CVE-2021-41773
CVE-2021-41773 Простой bash POC-скрипт для уязвимости Path Traversal & RCE в Apache 2.4.49 Пример использования: Настройте netcat listener: $ nc -nvlp Затем запустите скрипт: $ ./exploit.sh Отказ от ответственности Этот инструмент предназначен только для образовательных целей. Я не несу...
RDP_jammer
RDPjammer CVE-2012-0152 exploit using metasploit and BASH SYNTAX : Script.sh...
puppet-shellshock
Этот модуль определяет уязвимость бинарного файла bash к эксплойтам shellshock CVE-2014-6271 или CVE-2014-7169, а затем исправляет её там, где это возможно. Поддерживаемые платформы: Debian 5, 6, 7 Ubuntu 12.04 LTS, 14.04 LTS, 14.10 RHEL/CentOS 5, 6 Использование class 'shellshock': Facter...
POC-CVE-2026-7873
Описание PoC-эксплойт для CVE-2026-7873 Использование python3 poc.py -u -name -pwd -c...
ralph
Ralph A working implementation of the Ralph Wiggum autonomous loop technique for Claude Code. Background The official ralph-wiggum plugin in Anthropic's plugin marketplace is currently broken due to a security update in Claude Code v1.0.20 August 2025. The security patch CVE-2025-54795 correctly...
POC-CVE-2026-18729
Описание Эксплойт PoC для CVE-2026-18729 Использование python3 poc.py -url -uname -pword -c Без bash-команды доказательство выполнения кода через ошибку деления на ноль С bash-командой ПРИМЕЧАНИЕ: Вывод bash не возвращается, поскольку конечная точка возвращает только шаблон компонента и метаданны...