drovorub-hunt

Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale Recently, the National Security Agency and Federal Bureau of Investigation released a report outlining command and control capabilities leveraged by the Russian General Staff Main Intelligence Directorate GRU...

CVE-2019-15107

CVE-2019-15107 Webmin Exploit CVE-2019-15107 An issue was discovered in Webmin =1.920. The parameter old in passwordchange.cgi contains a command injection vulnerability. NVD Compiling $ git clone https://github.com/whokilleddb/CVE-2019-15107 $ cd CVE-2019-15107 $ make Example Usage $ ./exploit...

Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter

Nuclei Template Exploit F5 BIG-IP iControl REST Auth Bypass RCE | Command Parameter CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of...

JavaDeserialization

Java Deserialization Vulnerability Scanner A Java deserialization vulnerability scanner for vulnerabilities similar to CVE-2017-10271. This project currently contains only one PoC; others have not been organized yet. Installation 1. Install nmap ​ https://nmap.org/download.html Download the...

kscan

Kscan - Lightweight Comprehensive Scanner Chinese Readmeurl-doczh | English Readmeurl-docen 0 Disclaimer The author did not participate in any XX operation, please stop tracing This tool is intended only for legally authorized enterprise security construction activities and personal learning. If...

CVE-2019-12086-jackson-databind-file-read

jackson-CVE-2019-12086 Vulnerability Description When Default Typing is enabled, and the classpath contains mysql-connector-java version 8.0.15 released on 2019.2.1 or earlier, an attacker can read arbitrary files by sending malicious JSON data. The mysql-connector-java library is the commonly us...

XPL-SEARCH

XPL SEARCH Search exploits/vulnerabilities in multiple databases online! XPL SEARCH is a multiplatform toolWindows and Linux, which was developed in PHP with the aim of helping the hacker community to find exploits or 'vulnerabilities', using online databases, below is the list of databases which...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 jenkins-cli We have seen Jenkins File Leak / RCE CVE-2024-23897 exploited in the wild and managed to reproduce it. If your Jenkins allows anonymous users or user registration, immediately update it to the latest version. java -jar jenkins-cli.jar -s...

tvsz

CVE-2018-6389 PoC node js multisite with proxy This script is based on CVE-2018-6389, a rather insidious problem in Wordpress, which unfortunately will likely not be fixed by the team developing the platform, even though it has been known for quite some time. !!! IMPORTANT BEFORE YOU CONTINUE !!!...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...

cve-2024-23897-jenkins_lfi_reproduction

CVE-2024-23897 — Jenkins CLI Arbitrary File Read Vulnerability CVSS 9.8 CRITICAL — Actively exploited in the wild Overview CVE-2024-23897 is a critical arbitrary file read vulnerability in Jenkins' command-line interface CLI. The Jenkins CLI uses the args4j library for parsing command arguments...

xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Remote Code Execution Xerte Online Toolkits versions 3.15 and earlier suffer from 3 vulnerabilities in the /editor/elfinder/php/connector.php component, which may be chained together by an unauthenticated attacker to achieve Remote Code Execution RCE. Affected Version...

DFShell

██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚══════╝╚══════╝╚══════╝...

Vite-CVE-2025-30208-Scanner

An automated tool for detecting Vite CVE-2025-30208 vulnerability, supporting batch scanning and result saving. Features ✅ Colored terminal output ✅ Batch target scanning file import supported ✅ Multi-threaded concurrent detection adjustable thread count ✅ Automatic saving of vulnerability result...

pentest-harness

Pentest Harness Heaven for Hackers — the professional security testing workspace. An open-source, dark-first AI agent harness for authorized penetration tests, bug bounty research, security labs, and CTF engagements. Built on a plugin architecture where every layer — model adapters, tools,...

GLPwn

GLPwn A GLPI hack tool, using Apache directory listing and / or CVE-2020-15175 to dump files and valid sessions. Who is vulnerable? Any GLPI instance that has Apache directory listing already enabled on the /files folder All GLPI instances prior to 9.5.1 running on a default Apache2 server. What...

gsscred-move-uaf

GSSCred-move-uaf The com.apple.GSSCred XPC service, which runs as root on macOS and iOS, does not properly implement the "move" command, leading to a use-after-free condition in the doMove function. The GSSCred service can be reached from within the default application sandbox on iOS. This progra...

hook

Hook Hook exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there is a builtin low privileged user named status that this script...

CVE-2026-103535

Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution. The itemname parameter, used to build the translation file's write path, does not sanitize directory traversal sequences such as ../. This...

CVE-2026-103527

Thelia v2.6.0's Smarty templates address.html and address-update.html fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting XSS when an authenticated user visits the malicious link containing attacker‑controlled JavaScript...