By-Poloss..-..CVE-2017-20251

CVE-2017-20251: Insert PHP Plugin PHP Code Injection Vulnerability Title Unauthenticated PHP Code Injection via Shortcode Processing in Insert PHP Plugin Basic Information...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 Subida de shell inversa Una versión ligeramente modificada del Mt-Code POC que genera una shell inversa completa en lugar de una web shell. Este exploit utiliza el famoso PentestMonkey PHP Reverse Shell. Instalación pip install -r requirements.txt Ejemplo de uso: Cre...

OpenSSL_1.0.1g_After

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2021-44228-Demo

CVE-2021-44228-Demo An example of remotely injecting code via RMI and LDAP using CVE-2021-44228. root@kitploit: Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello, $jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit RmiServ...

Exploit for Use After Free in Linux Linux_Kernel

ghost-hoock A minimal fork of GhostLockhttps://github.co...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

blue-pigeon

Blue Pigeon: Bluetooth-based Data Exfiltration and Proxy Tool for Red Teamers 1. The Motivation | Birth of the Bird ​ How does Blue Pigeon work? ​ The Pigeon's Key Requirements 2. The Components | Dissecting the Pidgey apart ​ 1. Blue Pigeon - The Mobile Applicaton ​ 2. Blue Beak - Custom...

azuredevops-enum

ado-enum Una herramienta de línea de comandos para enumerar organizaciones de Azure DevOps mediante un token de acceso personal PAT. Consulta la API REST de Azure DevOps para exponer proyectos, repositorios, conexiones de servicio, compilaciones, artefactos de compilación y ajustes de seguridad,...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview...

CVE-2022-45299

CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...

CVE-2025-3248

CVE-2025-3248: Langflow Unauthenticated Remote Code Execution RCE This repository contains two Python scripts: LangflowCheck.py: A scanner that checks for Langflow AI instances vulnerable to CVE-2025-3248. exploit.py: A working reverse shell exploit for vulnerable Langflow targets. Summary...

test-fuzz

test-fuzz test-fuzz is a Cargo subcommand and a collection of Rust macros to automate certain tasks related to fuzzing with afl.rs, including: generating a fuzzing corpus implementing a fuzzing harness test-fuzz accomplishes these in part using Rust's testing facilities. For example, to generate ...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Tested support: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32, Win2003 x64 The original exp does not support xp, 2003. This code adds support for these two systems based on...

malwoverview

Malwoverview !Alt...

cve-2020-1337-poc

cve-2020-1337-poc poc for CVE-2020-1337 Windows Print Spooler Elevation of Privilege Credit to all researcher who find out this bug. Ref: https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/ code browsed from: https://github.com/sailay1996/WerTrigger...

CVE-2026-21858

CVE-2026-21858 n8n Workflow Automation Platform - Remote Code Execution A security research tool for detecting CVE-2026-21858, a critical remote code execution vulnerability in the n8n workflow automation platform. Table of Contents Vulnerability Summary Affected Versions Technical Analysis...

ingressnightmare-detection-poc

IngressNightmare Detection Tool Overview This tool provides a non-intrusive detection capability for the IngressNightmare vulnerability chain CVE-2025-1974 affecting Ingress NGINX Controller. It specifically leverages the auth-url annotation injection vector CVE-2025-24514 to verify the presence ...

wave-share

wave-share Una prueba de concepto para la señalización WebRTC mediante sonido. Funciona con todos los dispositivos que tengan micrófono + altavoces. Se ejecuta en el navegador. Los dispositivos cercanos negocian la conexión WebRTC intercambiando los datos necesarios del Protocolo de Descripción d...

react2shell-test-server

React2Shell Test Server A test server for demonstrating and testing React2Shell CVE-2025-55182 vulnerability Description We have been researching the React2Shell RCE CVE-2025-55182 since it was released, and we worked on preventing this vulnerability with our customers. We are open-sourcing this...

Router-Exploit-Shovel

Router Exploit Shovel Automated Application Generation for Stack Overflow Types on Wireless Routers Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the...