phpsploit

Framework C2 completo che persiste silenziosamente sul webserver tramite una riga di PHP polimorfica Manutenibilità codeclimate Creato da nil0x42 e contributori !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb3...

CVE-2019-19356

Enrutador NETIS WF2419 RCE CVE-2019-19356 Contexto La vulnerabilidad es una Ejecución Remota de Código RCE autenticada como root a través de la página de gestión web del enrutador NETIS WF2419. La vulnerabilidad se ha encontrado en la versión de firmware V1.2.31805 y en la última versión de...

CVE-2023-2636

CVE-2023-2636...

CVE-2025-3248

中文 ｜ English Langflow Vulnerability Scanner A vulnerability scanner for CVE-2025-3248 in Langflow applications. Features Scan single target or multiple targets using FOFA Execute system commands on vulnerable targets Retrieve system information Custom payload support Progress bar for FOFA scannin...

CVE-2020-2883

CVE-2020-2883 re write of: https://github.com/zhzyker/exphub/blob/master/weblogic/cve-2020-2883cmd.py my poc is python3 enjoy and happy hacking...

PoC_CVE-2019-10149--rce

About Remote Command Execution into shell from a vulnerable exim service. Vulnerable versions go from 4.87 to 4.91 inclusive. Check https://nvd.nist.gov/vuln/detail/cve-2019-10149. The following script is based on Qualys PoC. Check...

CVE-2023-51385_test

Verify CVE-2023-51385 First, add the following to /.ssh/config 主机 .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Command injection exists in the .gitmodules file statement url = ssh://echo helloworld cve.txtfoo.example.com/bar After configuration is complete, execute the...

cve-2026-9558-poc

CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...

CVE-2025-65791

CVE-2025-65791 — Command Injection in ZoneMinder Overview A critical Command Injection vulnerability exists in ZoneMinder v1.36.34 due to improper input validation in the web/views/image.php component. Unsanitized user-controlled input is passed directly to the PHP exec function, allowing remote...

airstrike

AirStrike Stage0 This project is a Stage0 C2 that is highly customizable and can be used to create a template for your own C2 or to use it as a base for your own C2 agents. Currently there are 4 different parts to this project 1. agent is a folder which has two different agents, one is written in...

active_c2_ioc_public

+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...

PyHmmm

PyHmmm What is this? This is a third party agent for Havoc C2 written in python. It is intended to be a basic PoC used to learn how to write custom Havoc agents, with its accompanying blog post...

Volumiser

Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...

CVE-2025-67511

CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself Hacktive Security blog post for CVE-2025-67511 Blog Post Link : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR A command injection vulnerability in the function...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

POC-CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...

CVE-2022-46080

CVE-2022-46080 Nexxt Router 15.03.06.60 Authentication Bypass and Remote Command Execution...

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

CVE-2023-35085-POC-EXP

PS: All the scripts are achieved by Gemini 2.5 pro and CLaude 3.7. It may doesn't work well, because I don't know how to use the api "/mifs/rest/api/v2/command/exec", the same as the AIs, who pretented that they know it very well...

CVE-2023-33869-RCE-PoC

Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...