TryHack3M-Bricks-Heist

target:10.201.6.98 enumeration nmap -A 10.201.6.98 since there is a wordpress with name "brick by brick" and the name of this room is brick it is probably where we can find vulnerability so lets enumerate wordpress wpscan --url https://bricks.thm --disable-tls-checks running with tls-checks wont...

CVE-2022-1329

CVE-2022-1329 The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...

CVE-2025-24893

CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ chmod +x cve.sh $ ./cve.sh Affected versions: From 5.4 up to 15.10.11 From 16.0.0 up to 16.4.1 Disclamer This tool is for educational purposes only. I...

CVE-2025-6440

CVE-2025-6440 — WordPress WooCommerce Dynamic Pricing & Discounts Plugin Overview This repository contains a Python proof-of-concept PoC script for testing an unauthenticated file upload vulnerability affecting the WordPress WooCommerce Dynamic Pricing & Discounts plugin. ⚠️ This project is...

CVE-2022-1388

CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass RCE This Python script exploits CVE-2022-1388, a critical vulnerability in F5 BIG-IP iControl REST that allows unauthenticated remote command execution via improper access control and HTTP header handling. ⚠️ For educational and...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode python go.py Enter target URL → select function menu. Detection Target Fast detect 8 basic info items...

CVE-2026-54424

CVE-2026-54424 Exploiting Parsec for Windows versions 150-104a to gain: Remote code execution as SYSTEM Arbitrary file read as SYSTEM NTLM hash capture for SYSTEM The exploits stem from the same vulnerability, but the actual paths diverge. Technical writeup:...

CVE-2018-10933

Authentication Bypass in Server Code CVE-2018-10933 Versions 0.7.6 to 0.8.4 Description libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2MSGUSERAUTHSUCCESS message in place of the SSH2MSGUSERAUTHREQUEST message which the...

CVE-2022-22965

POC Spring4Shell CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof Of Concept. The naming of this flaw is based on the similarities to the infamous Log4j LOG4Shell. Details about this vulnerability https://websecured.io/blog/624411cf775ad17d72274d16/spring4shell-poc...

CVE-2023-32571

🐞 CVE-2023-32571 - System.Linq.Dynamic.Core Remote Code Execution Proof of Concept for CVE-2023-32571, a remote code execution vulnerability in System.Linq.Dynamic.Core 1.0.7.10 to 1.2.25. This vulnerability allows attackers to execute arbitrary code and commands when untrusted input to methods...

js2py-Sandbox-Escape-CVE-2024-28397-RCE

CVE-2024-28397 js2py Sandbox Escape Exploit A collection of exploit scripts targeting the js2py sandbox escape vulnerability CVE-2024-28397 that allows arbitrary code execution through Python object introspection. 🔍 Vulnerability Overview The js2py library contains a critical sandbox escape...

CacheMeIfYouCan

This repository does not have a README...

CVE-2024-6387-POC

Exploiting OpenSSH Vulnerability CVE-2024-6387 🚀 A Python script designed to exploit a remote code execution RCE vulnerability in OpenSSH CVE-2024-6387. This vulnerability involves a condition in the handler that can lead to arbitrary code execution, allowing an attacker to gain root access. This...

CVE-2025-32433_PoC

CVE-2025-32433Erlang-OTP This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running...

CVE-2025-27480

CVE-2025-27480 CVE‑2025‑27480 – Remote Code Execution in OpenSSH What the vulnerability is all about OpenSSH version 8.9p1 contains a subtle buffer‑overflow bug that happens when it parses an SSHUSERAUTH packet. A client can send a packet with a very long “user” field, and the data lands in the...

CVE-2025-47812

CVE-2025-47812 This is a Proof of Concept PoC of the Wing FTP Server Exploit CVE-2025-47812 Description Wing FTP Server versions prior to 7.4.4 suffered a Remote Code Execution RCE vulnerability as a result of the insecure treatment of the username parameter. When we are allowed to login in the...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 and CVE-2025-71260 BMC FootPrints Pre-Authenticated Remote Code Execution Chain BMC FootPrints Pre-Authenticated Remote Code Execution Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if BMC FootPrints instance is vulnerable to...

DiffCatcher

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. A Rust CLI tool that recursively discovers Git repositories, captures state changes,...

F5-BIG-IP

CVE-2020-5902 — F5 BIG-IP TMUI RCE Proof-of-Concept exploit for the critical path-traversal / remote code execution vulnerability in F5 BIG-IP's Traffic Management User Interface TMUI. ⚠️ For authorized penetration testing and security research only. Unauthorized use against systems you do not own...