AdaptixC2

AdaptixC2 v1.2 FEB, 28: What has changed in version v1.2? Adaptix is an extensible post-exploitation and adversarial emulation framework made for authorized penetration testing. The Adaptix server is written in Golang and to allow operator flexibility. The GUI Client is written in C++ QT, allowin...

CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported getIsEncryptionSupported...

Humax-CLI

Humax-CLI An unofficial Humax IR4000HD terminal client with enhanced features. This all came from reversing the android app and there will be an article ASAP 😄 Screenshot Usage : usage: sendUDP.py -h -i IP -l --try-this --loop -j -b btn btn ... optional arguments: -h, --help show this help messag...

CVE-2009-4118

CVE-2009-4118 Cisco VPN Client - Integer Overflow Denial of Service Exploit-DB publication at https://www.exploit-db.com/exploits/10190/ Cisco official Intelligence AlertID 19445 and Credits http://tools.cisco.com/security/center/viewAlert.x?alertId=19445 Author Alex Hernandez aka @alt3kx...

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 testing environment and Nuclei template This repository contains a high-confidence Nuclei template to detect CVE-2021-21980 vSphere Web Client path traversal and a small mock environment that reproduces the vulnerable behavior for safe local testing. Files:...

Ubisoft-Uplay-Desktop-Client-63.0.5699.0

Ubisoft-Uplay-Desktop-Client-63.0.5699.0...

CVE-2024-48910-POC

CVE-2024-48910 Proof of Concept This is a proof of concept for CVE-2024-48910. This is a vulnerability that was present in DOMPurify, an XSS sanitizer for HTML, SVG, and MathML. This version of DOMPurify is vulnerable to prototype pollution, where an atatcker can inject properties into any JS...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html WebVM is a server-less virtual environment running fully client-side in HTML5/WebAssembly. It...

dnscat2-powershell

dnscat2 is a DNS covert channel tool by @iagox86 Ron Bowes which is used to transfer data over DNS requests. This is a powershell version of the dnscat2 C client. Click here for a blog post that gives a more detailed breakdown of the purpose of this script, and how to use it. To use this script,...

zentao

zentao Getshell downloadZipPackage find C:\Users\Jas502n\Desktop\xamppfindstr /s /i "downloadZipPackage" zentao\log.txt:module\client\control.php: $result = $this-client-downloadZipPackage$version, $link; zentao\log.txt:module\client\ext\model\xuanxuan.php:public function...

tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-

Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ and https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...

CVE-2025-6514

mcp-remote Connect an MCP Client that only supports local stdio servers to a Remote MCP Server, with auth support: Note: this is a working proof-of-concept but should be considered experimental. Why is this necessary? So far, the majority of MCP servers in the wild are installed locally, using th...

AndroidClient

AndroidClient A client-based remote administration tool to be used for communication with a web-interface. The provided source code may be used freely. No license needed. Enjoy! Note: It's recommended to use Android Studio 3.2 Canary or up to compile the source. Visit: http://revcode.eu for more...

CVE-2026-2942

ProSolution WP Client — Unauthenticated File Upload & RCE Scanner Plugin: prosolution-wp-client Affected Version: Vulnerability Type: Unauthenticated Arbitrary File Upload → Remote Code Execution Risk Level: 🔴 Critical CVSS 9.8 Requirement: Public page containing prosolfrontend shortcode 📌 About...

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 PoC Exploit This repository contains a Proof of Concept PoC exploit for CVE-2024-11680, a critical vulnerability in ProjectSend r1605 and older versions. The exploit targets an improper authentication flaw due Privilege Misconfiguration issues. Features Exploits improper auth to...

CVE-2026-46453

camel-elasticsearch-rest-client Unprefixed-Header Injection Reproducer CVE-2026-46453 This project demonstrates a message-header injection / authorization bypass in Apache Camel's camel-elasticsearch-rest-client component, tracked as CVE-2026-46453. The component reads several Exchange headers to...

Qlik-View-12.60-Including-SR-Stored-Cross-Site-Scripting-CVE-2022-42248

QlikView = 12.60 Including SR Stored Cross Site Scripting CVE-2022-42248 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision: 1.0 Impact: Stored cross-site scripting in QlikView Aj...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek's WLAN Access Point driver. Vulnerability CVE : CVE-2026-20452 CVSS : 8.0 HIGH CWE : CWE-122 — Heap-based Buffer Overflow Subcomponent : wlan AP driver Attack...

JQueryingU

JQueryingU NOTES: Base client side detection code created by Christian Ludwig https://jsfiddle.net/ChristianL/AVyND/, and used by APT 29 in 2016. APT 29 modified the popup to be a POST request and used it during a conference shadowing campaign to profile user systems and who clicked before sendin...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit A small Python test client to send HTTP GET requests with an oversized Authorization: Basic header. This tool is intended for lab testing and research into header-parsing issues e.g., null-dereference / crash bugs such as CVE-2025-4476 in libsoup. It demonstrates how a...