nagios-xi-5.7.5-bugs

nagios-xi-5.7.5-bugs Bugs reported to Nagios XI CVE-2021-25296 Code Location /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php Code snippet if !empty$pluginoutputlen $diskwmicommand .= " --forcetruncateoutput " . $pluginoutputlen; $servicewmicommand .= "...

CVE-2023-22527

I am not responsible for any illegal attacks CVE-2023-22527 Bulk scanning scripts help usage: python3 CVE-2023-22527.py -u -f -c options: -h, --help show this help message and exit -u TARGET, --target TARGET Target URL -f FILE, --file FILE URL file -c CMD, --cmd CMD Commands to execute -t THREAD,...

CVE-2019-14287-write-up

CVE-2019-14287-write-up 4294967295 Sudo Bug Allows Restricted Users to Run Commands as Root DEMONSTRATION OF VULNERABILITY Add a new user: sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo Add a new entry test ALL=ALL, !root /usr/bin/id // specifying...

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker Container Command Execution Tool A powerful Docker remote API exploitation tool for security research and testing of CVE-2025-9074 vulnerability. Core Advantages ✅ Fully automated container lifecycle management : Automatically creates temporary containers, cleans up after...

sunflower_exp

CVE-2022-10270 Affected versions: Sunflower Personal Edition Windows --thread Number of threads for scanning default thread count: 100 --help help sunflowerpocexp.py vulnerability verification and scanning tool Port detection: eg：python sunflowerpocexp.py --scan --ip --port --thread parameters...

MrRAT

MrRAT This is a cross-platform Python 2.x Remote Access Trojan RAT, MrRAT was created to maintain a clean design full-featured Python RAT. Currently a work in progress and still being actively hacked on. Disclaimer: This RAT is for research purposes only, and should only be used on authorized...

CVE-2024-4358

Telerik Report Server Authentication Bypass - CVE-2024-4358 Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicabl...

Solr_CVE-2019-17558

SolrCVE-2019-17558 usage: python3 SolrCVE-2019-17558.py url whoami...

SNOWCRASH

SNOWCRASH Un generador de payloads políglota Introducción SNOWCRASH crea un script que puede ejecutarse tanto en máquinas Linux como Windows. El payload seleccionado por el usuario en este caso, código combinado de Bash y PowerShell se incrusta en una única plantilla políglota, que es independien...

CVE-2015-3306-Python-PoC

CVE-2015-3306-Python-PoC This was converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development. It originally came from searching for random remote command execution modules with searchsploit. I anaylzed the metasploit code and converted it to python...

smbmap

SMBMap SMBMap를 사용하면 전체 도메인에 걸쳐 삼바 공유 드라이브를 열거할 수 있습니다. 공유 드라이브, 드라이브 권한, 공유 내용을 나열하고, 업로드/다운로드 기능, 파일 이름 자동 다운로드 패턴 매칭, 원격 명령 실행까지 가능합니다. 이 도구는 침투 테스트를 염두에 두고 설계되었으며, 대규모 네트워크에서 잠재적으로 민감한 데이터를 검색하는 과정을 단순화하기 위한 것입니다. 일부 기능은 충분히 테스트되지 않았으므로, 버그가 발견됨에 따라 변경 사항이 있을 예정입니다. 저는 주로 업무 중에만 버그를 찾고 수정하기 때문...

WMImplant

WMImplant WMImplant is a PowerShell based tool that leverages WMI to both perform actions against targeted machines, but also as the C2 channel for issuing commands and receiving results. WMImplant will likely require local administrator permissions on the targeted machine. Developed by...

CVE-2023-42793

CVE-2023-42793 For educational purposes only PoC for CVE-2023-42793 Usage CVE-2023-42793admin.sh: chmod +x CVE-2023-42793admin.sh ./CVE-2023-42793admin.sh ip/domainname port Proof of working: Usage CVE-2023-42793rce.sh: chmod +x CVE-2023-42793rce.sh ./CVE-2023-42793rce.sh ip/domainname port comma...

CVE-2024-7954

CVE-2024-7954 이 익스플로잇은 SPIP 대상CVE-2024-7954에서 시스템 명령을 실행하려고 시도합니다. 개요 CVE-2024-7954에 대한 대량 스캔 및 익스플로잇 도구입니다. SPIP 4.2.8은 인증되지 않은 공격자가 SPIP 대상에서 RCE를 실행할 수 있게 합니다. 이 도구는 이 보안 연구를 기반으로 합니다. 사용 방법 스크립트 요구 사항 설치: pip install -r requirements.txt 옵션: POC for SPIP 4.2.8 vulnerability options: -h, --help...

CVE-2025-55182-poc-tool

CVE-2025-55182-poc-tool A powerful exploit tool for detecting and exploiting CVE-2025-55182 vulnerability in Next.js React Server Components. This tool allows remote command execution RCE in vulnerable Next.js applications with built-in WAF bypass capabilities. Overview CVE-2025-55182 is a critic...

cve-2023-1671

Сve-2023-1671 How does cve-2023-1671https://vulners.com/cve/CVE-2023-1671 work? /opt/ws/bin/ftsblistpack is a Perl script that calls /opt/ws/bin/sblistpack, which is another Perl script. The shell command arguments in it are enclosed in single quotes: $rc += system"$sblistpack '$uri' '$user'...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

Shitrix-CVE-2019-19781

Shitrix-CVE-2019-19781 My working approach to exploiting Shitrix Updated 21st July, 2020 - now supports multi-worded commands and forward slashes You need curl = 7.42.0 Call it with, e.g.: ./shitrix.sh target port ls -al...

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

CVE-2025-64446 PoC - FortiWeb Path Traversal Description Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb CVE-2025-64446 that allows execution of administrative commands. Technical Details CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...