watchTowr-vs-SonicWall-PreAuth-RCE-Chain

SonicWall SMA 100 PreAuth RCE Chain PoC PoC for SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 See our blog post for technical details https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC in Action python watchTowr-vs-SonicWall-PreAuth-RCE-Chain....

CVE-2021-41773

CVE-2021-41773 Go language poc&exp project. Disclaimer: This project comes from the author's daily study notes. Do not use related technologies and tools for illegal testing. The author shall not be liable for any adverse consequences arising therefrom. Usage: ./main -u Single URL ./main -u -c...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 is an encrypted remote administration and C2 framework designed exclusively for educational use, security research, and controlled laboratory environments. The project demonstrates how to build a custom command-and-control server with application-layer...

openam-CVE-2021-35464

openam CVE-2021-35464 tomcat command execution with echo. Project based on ysoserial and Java-Rce-Echo Building the project requires adding ysoserial.jar and jato-14.6.3.jar to dependencies. POST /OpenAM/ccversion/Version HTTP/1.1 Host: php.local:8081 Upgrade-Insecure-Requests: 1 User-Agent:...

CVE-2023-30145

Description: Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter. Affected Component: All versions that are below 2.7.0 Fixed version: Fixed Versions: 2.7.4 Step to reproduce : Detection: 1.open below...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...

CVE-2022-1388

CVE-2022-1388 Checking and exploit for CVE-2022-1388 Installation: python3 -m pip install -r requirements.txt Usage Single : python3 cve.py s fullurl apicommand example python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' Mass : python3 cve.py m host li...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

CVE-2026-39987_RCE_PoC

CVE-2026-39987 — Marimo WebSocket RCE PoC Proof of Concept for CVE-2026-39987 , demonstrating remote command execution through the vulnerable WebSocket terminal endpoint. Disclaimer: This PoC is intended for authorized security testing and educational use only. Use it only against systems you own...

OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Test Environment vulhub/ofbiz:18.12.09 Usage Start java -jar OFBiz-Attack.jar There are three modules: Vulnerability Detection Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module exploitation...

CVE-2020-1938

CVE-2020-1938-tomcat-File Download + File Inclusion Tomcat-Ajp protocol file read vulnerability】 Source POC source: https://github.com/nibiwodong/CNVD-2020-10487-Tomcat-ajp-POC/blob/master/poc.py After modification, it can include files, and under certain conditions, execute commands...

CVE-2024-29824

CVE-2024-29824: Ivanti EPM SQL Injection Remote Code Execution Vulnerability Proof of concept exploit to blindly execute commands on vulnerable Ivanti EPM appliances. Blog Post Deep dive and indicators of compromise here:...

CVE-2020-0688-GUI

一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...

CVE-2022-26134

CVE-2022-26134 1. First run the shodan scripts to grabs all the ips python3 shodanscript.py -API yourapi -L limit -D "http.favicon.hash:-305179312 200" log.txt ex: python3 shodanscript.py -API xxxxxxx -L 10 -D "http.favicon.hash:-305179312 200" log.txt 2. For all valid ips : cat log.txt | httpx -...

CVE-2021-21300

CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Use DNSlog for vulnerability verification of CVE-2021-26295. Poc usage: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot properly generate the payload exp: python exp.py https://baidu.com then enter th...

ThinkAdmin-CVE-2020-25540

ThinkAdmin-CVE-2020-25540 ThinkAdmin CVE-2020-25540 POC Usage $ python3 exploit.py -t -c...

RemoteKeyStrokes

RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...