CVE-2011-2523-exploit

Exploit CVE-2011-2523 Backdoor de vsFTPd 2.3.4 Este proyecto demuestra la explotación de la vulnerabilidad de backdoor de vsFTPd 2.3.4 CVE-2011-2523 utilizando Python y pwntools. Aviso: Este proyecto es solo para fines educativos y de pruebas de penetración autorizadas. NO lo utilices contra...

log4j2-rce-recap

Little recap of the log4j2 remote code execution CVE-2021-44228 Requirements maven = 3 java = 8 no running ldap on 127.0.0.1:1389 Usage Build with maven. mvn test The surefire plugin will be executed two times: ExploitabilityTest proofs the expolitability of the bug. MitigationTest will be execut...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauthenticated RCE ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║ ╚████║╚██████╔╝ ██║...

Penetration-Testing-Assessment-23-04-2026

Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...

CVE-2025-32434-exploit

Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...

PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276

Authenticated PRTG network Monitor remote code execution Based on https://www.exploit-db.com/exploits/46527 Usage: simply manually edit the script to include your Target URL, admin username and password like so: TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin2019" Then insert...

CVE-2025-50286

Grav Admin Direct Install RCE CVE-2025-50286 Módulo de Metasploit y configuración de laboratorio para ejecución remota de código autenticada en la funcionalidad de instalación directa del plugin Grav Admin. Resumen CVE: CVE-2025-50286 Impacto: RCE autenticado Vector: Panel de administración →...

CVE-2022-22963_Reverse-Shell-Exploit

CVE-2022-22963 Reverse Shell Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

Lenovo-CVE-2025-8061

CVE-2025-8061 is a privilege escalation vulnerability in Lenovo's LnvMSRIO.sys driver. The driver exposes IOCTL handlers that allow any user-mode process including unprivileged users to: Read/write arbitrary Model-Specific Registers MSRs Read/write arbitrary physical memory This gives a standard...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Remote Code Execution Overview Field| Details ---|--- CVE| CVE-2025-24893 Software| XWiki Vulnerability| Server-Side Template Injection SSTI → RCE Authentication| Not required CVSS Score| Critical Context| Discovered during HackTheBox CTF Description XWiki exposes a...

CVE-2025-46816

CVE-2025-46816 POC para explotar la ejecución de código en goshs en versiones 1.0.5...

rocketcat-cve-2021-22911-exploit

Exploit de Rocket.Chat CVE-2021-22911 ⚠️ DESCARGO DE RESPONSABILIDAD - SOLO USO EDUCATIVO Este exploit es solo para pruebas de penetración autorizadas y fines educativos. El acceso no autorizado a sistemas informáticos es ilegal. El autor no se hace responsable de ningún uso indebido. 📋 Resumen...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 is an authentication bypass resulting in an information leak on Joomla! Servers. Although rated as a CVSSv3 5.3 Medium severity by NVD, this vulnerability could allow an attacker to achieve code execution under the right circumstances. That likely justifies the...

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

Rite CMS v3.0 Multiple Stored XSS Author: Sergio Description: Rite CMS 3.0 is affected by a Cross-Site scripting XSS stored vulnerability that allows attackers to execute arbitrary code via a crafted payload in to the Global Content Blocks in the Administration Menu. Attack Vectors:...

CVE-2019-0887

CVE-2019-0887 Compila el CVE-2019-0887, renómbralo a winhlp.dll Compila InstallHook, renómbralo a hook.exe cuidado, deben compilarse con x64 Ponlos en el sistema malvado tal cual c:\windows\hook.exe c:\windows\winhlp.dll c:\windows\winhlp64.exe something evil Si alguien quiere cambiar la ruta, aq...

CVE-2025-66034

CVE-2025-66034 — fontTools varLib Arbitrary File Write → RCE PoC exploit for an Arbitrary File Write + XML Injection vulnerability infontTools.varLib Tested on HackTheBox — VarIaType Vulnerability fontTools.varLib processes .designspace XML files to build variable fonts. Two weaknesses combine to...

CVE-2018-6574

CVE-2018-6574 Pasos para reproducir: 1. Crea un archivo .c que contenga el comando malicioso revshell: include include static void malicious attributeconstructor; void malicious system""; 2. Compílalo usando GCC. Debes compilarlo en la misma arquitectura y sistema operativo que el objetivo por...

Rig-Exploit-for-CVE-2018-8174

Rig-Exploit-for-CVE-2018-8174 Al igual que en sus campañas anteriores, la campaña Seamless de Rig utiliza malvertising. En este caso, los malvertisements tienen un iframe oculto que redirige a las víctimas a la página de aterrizaje de Rig, que incluye un exploit para CVE-2018-8174 y shellcode. Es...

freemarker_RCE_struts2_s2-061

freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE script de prueba python freemarkerRCEstruts2s2-061.py...

Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC Este paquete permite: 1. Subir webshell a SharePoint 2. Extraer ValidationKey 3. Generar ViewState firmado 4. RCE mediante shell reversa/vinculada 🔧 Configuración git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Ejecución Subir la webshell...