hoh4

Requirements: python Command: python laravel-ignition-rce.py ""...

CVE-2025-55182-Scanner

CVE-2025-55182 RCE Scanner Batch detection and verification tool for CVE-2025-55182 React2Shell remote code execution vulnerability. ⚠️ CVSS 10.0 Critical Vulnerability | Affects React Server Components and Next.js 15.x/16.x versions | For authorized security testing only Vulnerability Overview...

React2Shell-CVE-2025-55182-PoC-Reverse-Shell

🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...

flask-session-cookie-manager

Decodificador/Codificador de Cookies de Sesión de Flask Autor original : Wilson Sumanang Autor de correcciones y mejoras : Alexandre ZANNI Importado desde saruberoz.github.io Dependencias Python 2 o Python 3 itsdangerous Flask Instalación Paquete BlackArch Linux pacman -S...

CVE-2021-3156

CVE-2021-3156 Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability See report » Francesco Marchiori · Alessandro Lotto Table of Contents 1. Abstract 2. Visualization 3. Fuzzing 4. Exploit 5. Patch 🧩 Abstract Any Unix-based Operating System is equipped with the sudo command tha...

CVE-2026-39813

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

smbexec

smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage who's blog...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

CVE-2023-2255

Command to execute the creation of the exploit: sudo python3 starkelevate.py /home/bob/Downloads/librecommand.exe --output librecommand.odt educational purposes only...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x Bajo discusión y análisis... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ Un atacante que tenga acceso de escritura al archivo de configuración de KeePass puede modificarlo e inyecta...

outis

outis outis is a custom Remote Administration Tool RAT or something like that. Think Meterpreter or Empire-Agent. However, the focus of this tool is neither an exploit toolkit there are no exploits nor persistent management of targets. The focus is to communicate between server and target system...

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4JExploitation-VulnerabiliyCVE-2021-44228. introduction A Remote Code Execution vulnerability has been found related to the Java logging library Log4j. CVE-2021-44228 This vulnerability has caused a stir in the global cyber community, since the Wannacry we have not seen such an impact. the...

drupal-cve-2018-7600-poc

README Drupal Drupalgeddon 2 Unauthenticated Remote Code Execution CVE-2018-7600 Drupal versions prior to 7.58, 8.x versions prior to 8.3.9, 8.4.x versions prior to 8.4.6, and 8.5.x versions prior to 8.5.1 allow remote attackers to execute arbitrary code due to an issue affecting multiple...

tulpar

Tulpar es un escáner de vulnerabilidades web de código abierto diseñado para automatizar las pruebas de penetración web. Tulpar tiene las siguientes características. Sql Injection GET Method XSS GET Method Crawl E-mail Disclosure Credit Card Disclosure Whois Command Injection GET Method Directory...

CVE-2018-6905

Installation and Execution Steps 0. Install type3 $docker-compose up 1. Start and install typo3 web server Go to http://web-server ip:port/typo3 and ignore the following message: Directory / is not writable Path /var/www/html/typo3 exists, but no file underneath it can be created. 2. Install...

vulnx

vulnx CLI moderna per esplorare i dati sulle vulnerabilità con potenti capacità di ricerca, filtraggio e analisi Avvio rapido 1. Get vulnx go install github.com/projectdiscovery/vulnx/v2/cmd/vulnx@latest 2. Explore commands vulnx --help vulnx search --help 3. Start exploring vulnerabilities no AP...

PuttyRider

PuttyRider Hijack Putty sessions in order to sniff conversation and inject Linux commands. Download PuttyRider-bin.zip Documentation Defcamp 2014 presentation - pdf Defcamp 2014 presentation - video Examples List existing Putty processes and their status injected / not injected PuttyRider.exe -l...

dawnscanner

Dawnscanner - El escáner de seguridad emergente para aplicaciones web Ruby dawn es un escáner de código fuente diseñado para revisar sus aplicaciones web en busca de problemas de seguridad. La herramienta puede escanear aplicaciones web escritas en Ruby y soporta todos los principales frameworks...

r00kie-kr00kie

r00kie-kr00kie Descargo de responsabilidad Este es un exploit PoC para la vulnerabilidad kr00k CVE-2019-15126. Este proyecto tiene únicamente fines educativos y no puede ser utilizado para violar la ley ni para beneficio personal. El autor de este proyecto no se responsabiliza por cualquier daño...

jaeles-signatures

Questo progetto faceva parte del motore Osmedeus. Scopri come è stato integrato in @OsmedeusEngine Questo repository contiene solo le firme predefinite per il progetto Jaeles. Pull request e idee sono benvenute. Leggi la documentazione ufficiale qui per scrivere la tua firma. Installazione jaeles...