Shocker-TJNULL-OSCP-

HackTheBox: Shocker Writeup A structured and professional walkthrough showcasing the identification and manual exploitation of the critical Shellshock vulnerability, followed by local privilege escalation via misconfigured sudo rights on a Linux target. Technical Overview Target OS: Linux IP...

ZigRaceExploit

CVE-2021-25741 — Explotación de TOCTOU Symlink Race en Zig Exploit educativo de la condición de carrera TOCTOU Time Of Check, Time Of Use que está en el origen de CVE-2021-25741, una vulnerabilidad en el kubelet de Kubernetes. El proyecto demuestra localmente sin clúster K8s cómo un intercambio...

CVE-2023-22809-Exploiter

CVE-2023-22809 Exploiter Scripts Disclaimer This script is provided for educational purposes only. The author is not responsible for any misuse or unintended consequences resulting from its use. Always follow ethical guidelines and obtain proper authorization before testing any security tools or...

struts2-jakarta-inject

POC Exploit for CVE-2017-5638 Only use this exploit on systems you own or have explicit rights to test Installation If you have go already installed on your computer, go get is the way to go go get github.com/Greynad/struts2-jakarta-inject Usage Single command execution struts2-jakarta-inject -u ...

CVE-2021-1675

Explanation of the vulnerability The Printer Spooler is a Windows service that manages print queues. It receives jobs submitted by the user, converts them to a format the printer understands, and sends them when the printer is available. It runs as a system service spoolsv.exe with high privilege...

PcanExploit

CVE-2024-44610: PEAK PCAN-Ethernet Gateway FD DR Authenticated Root Exploit What is it? This repository contains a Proof-of-Concept PoC exploit that executed code as root on Peak Ethernet gateways. It requires that you know the credentials to the web interface. How to fix it? The vendor has rapid...

SQLPad-RCE-Exploit-CVE-2022-0944

How It Works: This PHP code is designed to exploit a Remote Code Execution RCE vulnerability in SQLPad , related to CVE-2022-0944. It works by injecting malicious code into the SQLPad application, forcing it to execute a system command that opens a reverse shell – a connection that grants the...

CVE-2024-2997

CVE-2024-2997 Scanner Overview CVE-2024-2997 Scanner is an advanced vulnerability scanner designed to detect the command injection vulnerability in web applications. This tool helps security professionals identify potential security risks in their applications. Disclaimer This tool is for...

Mass-CVE-2025-29306

FoxCMS Mass Exploiter CVE-2025-29306 A specialized automation tool for security researchers to perform remote command execution RCE testing across multiple targets. 🛡️ Security Note This program is written in Bash and has been encrypted/compiled with SHC Shell Script Compiler. The source code is...

Exploit for CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthentica...

urless

About - v2.7 This is a tool used to de-clutter a list of URLs. As a starting point, I took the amazing tool uro by Somdev Sangwan. But I wanted to change a few things, make some improvements like deal with GUIDs and make it more customizable. Installation urless supports Python 3. Install urless ...

CVE-2024-3400

PAN-OS CVE-2024-3400 Check Overview FOR INTERNAL USE ONLY This script checks for evidence of the CVE-2024-3400 PAN-OS exploit on Palo Alto Networks firewalls. CVE: https://security.paloaltonetworks.com/CVE-2024-3400 IOCs: https://otx.alienvault.com/pulse/66198c3b58d2dd2ad4043bc6/ Requirements...

MalwareForge---Advanced-Static-Malware-Analyzer

🛡️ MalwareForge - Advanced Static Malware Analyzer MalwareForge is a powerful static malware analysis tool that detects malicious behavior without executing the file. ✨ Features 🦠 Behavior Analysis : Process Injection, Persistence, Network, Stealer, Evasion 💉 8 Injection Techniques : Process...

CVE-2023-33538-msf

CVE-2023-33538 – TP-Link TL-WR940N/841N Command Injection Metasploit module This Metasploit auxiliary module targets an authenticated command injection vulnerability in TP-Link TL-WR940N V2/V4 and TL-WR841N V8/V10 routers. The issue lies in the vulnerable ssid1 parameter used in WlanNetworkRpm.ht...

ProFTPD_CVE-2015-3306

m4ud ProFTPD 1.3.5 RCE exploit CVE : 2015-3306! root@kitploit: ProFTPd 1.3.5 RCE Usage: ProFTPD.py options Options: -h, --help show this help message and exit -l LHOST, --lhost=LHOST Local IP Required for Reverse Shell, -p LPORT, --lport=LPORT Port Required for Reverse Shell, -t TARGET,...

nmap-scan-results

Escaneo Nmap: Más de 200 vulnerabilidades encontradas Crítico: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Informe completo...

XSS2Shell-CVE-2026-64638

🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638 XSS2Shell Multi-Target Scanner Developer: Credit: YogaGymn PoC/scanning utility for authorized security testing on WordPress. The project contains an exploitation flow for a single target and a concurrent multi-target scan-only mode. Important: Use...

RustyInjector

⚠️ Disclaimer: For Research and Educational Purposes Only This project is a Proof of Concept PoC demonstrating Bluetooth keystroke injection, re-implemented in Rust. It is intended strictly for educational and security research purposes. Do not use this code to compromise systems without explicit...

CVE-2024-4577

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

CVE-2020-16012-PoC

CVE-2020-16012 | Side Channel Attack This repository contains Proofs of Concept PoCs for CVE-2020-16012 , a side-channel vulnerability identified in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. This project was conducted as a collaborative effort by a team of...