CVE-2024-24725-PoC

CVE-2024-24725-PoC...

CVE-2018-2636

Install $ pip install --user requests argparse unicodedata Info POC for CVE-2018-2636. Usage example python eGw.py -H 127.0.0.1 -P 8080 -i ... Let's get info about server ! Your instance is vulnerable to CVE-2018-2636 ... Links Oracle Critical Patch Update Advisory January 2018 - CVE-2018-2636...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

Grafana-CVE-2025-4123-POC

This repository does not have a README...

RAT-via-Telegram

RAT-via-Telegram Dviros's notes: Windows Remote Post Breach Tool via Telegram Python 2.7, Originally created by Ritiek, Forked and modified by mvrozanti and then myself. The whole purpose of this tool is to demonstrate as a "PoC" the control of an already breached machine, via Telegram. As the sa...

CVE-2020-0601_PoC

Based on POC's https://github.com/ly4k/CurveBall https://research.kudelskisecurity.com/2020/01/15/cve-2020-0601-the-chainoffools-attack-explained-with-poc/ https://github.com/kudelskisecurity/chainoffools?tab=readme-ov-file REQUIREMENTS/SOFFTWARE USED python version 3.11 openssl version 3.1...

jwt-key-confusion-poc

JWT Key Confusion PoC CVE-2015-9235 Written for the Hack the Box challenges - Under Construction and Secret Both included scripts perform a Java Web Token Key Confusion Attack CVE-2015-9235. To perform the attack it is required that the attacker know the public key which the server will use to...

DogWalk-rce-poc

Dogwalk Proof-of-Concept🐾 🚨 Disclaimer 🚨 The PoC allows an attacker to obtain Remote Code Injection on a Windows victim device. The goal of this repo is to make a PoC even more usable than the initial repo. DO NOT USE IT WITHOUT PRIOR AUTHORIZATION! Regarding the damage caused and the simplicity ...

CrushFTP-cve-2024-4040-poc

CrushFTP-cve-2024-4040-poc...

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

CVE-2023-29357-ExE

CVE-2023-29357-ExE Recreation of the SharePoint PoC for CVE-2023-29357 in C from LuemmelSec Usage: CVE-2023-29357.exe https://yoursharepoint.lol -v...

advisories

Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...

themebleed

ThemeBleed Proof-of-Concept for CVE-2023-38146 "ThemeBleed" Usage: ThemeBleed.exe Commands: server - Runs the server maketheme - Generates a .theme file referencing the specified host makethemepack - Generates a .themepack file referencing the specified host Data files The binaries in data...

Mirai-Spray

Mirai-Spray Scans typical Mirai loader/hostlists format with Hydra. This can be used to check if a list of hosts are able to be connected to. INSTALLATION apt update -y && apt upgrade -y apt install tor git clone https://github.com/Skotizo/Mirai-Spray cd Mirai-spray g++ main.cpp -o spray ./spray...

CVE-2025-0108-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this article are intended solely for network security research and educational purposes. No one shall use the information provided herein for illegal purposes or unauthorized system testing. The author is not responsible for any...

HotLoad-Driver

Hot Load Your Driver Using C++ this project was Bsides Augusta for the RAT talk. Slides can be seen bellow and are extremely helpful for understanding the execution flow. These two methods have separate projects. Demo / Slides:...

lbmap

Proof of concept scripts for advanced HTTP fingerprinting, presented at OWASP AppSecAsia 2012. These scripts should be considered a PoC or alpha quality. Suggestions, recommendations, signatures, pathces and flames are welcome via http://www.github.com/wireghoul/lbmap. The following tools are...

CVE-2025-8625

CVE-2025-8625 — PoC Overview This repository contains the source files for an article on Xakep.ru. The repository contains demonstration materials intended exclusively for security research, education, and testing in isolated laboratory environments. The repository is not intended for use against...

CVE-2024-23298.app

PoC for CVE-2024-23298 Just open Xcode 15.2 and clone this project...

VectorKernel

VectorKernel PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support x64 family 64bit OS only. Environment All modules are tested in Windows 11 x64. To test drivers, following options can be used for the testing machine: 1. Enable Loadin...