html-poc

Proof of concept code for client-side vulnerabilities Basic HTML proof of concepts for issues such as: Clickjacking insecure CORS settings CSRF Tabnapping XSSI postMessage issues Most of these are pretty basic, but having them all in one place avoids writing the same things over and over again. T...

cve-2021-21551-PoC

cve-2021-21551-PoC This repo contain a PoC I have done when blind analysis the dbutil23.sys driver for vulnerability. This was created by personal analysis without looking at writeups or even know which CVE exist in this driver. All the knowledge I have is that this driver is vulnerable in some w...

spring4shell-CVE-2022-22965

Simple Spring4Shell POC Check if endpoint is vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Exploit vulnerable endpoint python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Execute command on uploaded webshe...

cve-2019-11043.py

cve-2019-11043.py Python port of an ExploitDB proof-of-concept. Python Port of ExploitDB 48182 For Educational Purposes Only This project is a Python port of the ExploitDB PoC for exploit 48182. It was created for learning and research purposes. ⚠ Disclaimer The script has not been tested , so it...

heartbleed-proof-of-concept

Heartbleed CVE-2014-0160 Setup You will require docker in order to perform the setup. The exploit, dynamically generates the random bytes from the Client Hello message, therefore you will need to link the library when building the executable. The required package to be installed, in order to link...

CVE-2023-1698

wagoexploit.py - PoC-эксплойт для CVE-2023-1698 🚀 О программе wagoexploit.py — это эксплойт для проверки концепции PoC для CVE-2023-1698 , критической уязвимости, затрагивающей ПЛК WAGO. Этот эксплойт предоставляет злоумышленнику доступ к оболочке устройства, потенциально раскрывая конфиденциальн...

fockcache

fockcache FockCache - Test d'empoisonnement de cache minimalisé Détails sur l'empoisonnement de cache : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tente de provoquer un empoisonnement de cache en essayant les en-têtes X-Forwarded-Host et X-Forwarded-Scheme...

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

CVE-2022-44268 ImageMagick Arbitrary File Read PoC PoC for CVE-2022-44268 ImageMagick Arbitrary File Read PoC - Payload generator This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any...

CVE-2022-22954-POC

VMware-CVE-2022-22954-POC Disclaimer: This POC is for learning purposes only. All illegal operations are prohibited. If malicious destruction occurs, it has nothing to do with me!!! 1. Batch detection script: Usage: python vm-2022-22954-POC.py url.txt 2. Single URL detection: python...

CVE-2017-7494

CVE-2017-7494 CVE-2017-7494 C poc Use CVE-2017-7494 to get a reverse shell 1. First compile sambainit.c to generate libsamba.so 2. Modify the relevant addresses in isknownpipename.c, compile and execute...

CVE-2025-55182-VulnCheckPOC

CVE-2025-55182 Vulnerability Check PoC Proof-of-concept scanner for detecting React Server Components RSC vulnerability in Next.js applications CVE-2025-55182. Usage This is only a check to see if a server is vulnerable, based on this release by Searchlight Cyber...

CVE-2024-4577

Nuclei Template for CVE-2024-4577 This Nuclei template serves as a Proof of Concept PoC for CVE-2024-4577, a PHP CGI Argument Injection vulnerability. Example Command nuclei -t CVE-2024-4577.yaml -u https://example.com...

exploitarium

https://discord.gg/WytKH65ZR присоединяйтесь для исследований, помощи, документации и другой полезной информации для заинтересованных. Заявление Этот репозиторий был неполным при публикации. Что касается использования ИИ, мой фаззинг-воркфлоу был автоматизирован ИИ с помощью строгого рабочего...

faxhell

faxhell "Fax Shell" Un shell de liaison Proof-of-Concept utilisant le service Fax et un détournement de DLL basé sur Ualapi.dll. Voir notre article à l'adresse : https://windows-internals.com/faxing-your-way-to-system/ Comment utiliser Construisez Ualapi.dll et placez-le dans c:\windows\system32...

TheMisfits-CVE-2024-8465-SQLi

CVE-2024-8465 – SQL Injection Proof of Concept Team Information Team Name: The Misfits Team Members: Muhammad Tayyab Nisar Oluwasola SAMUEL Abubakar Mohamed Melek Balghouthi Overview This repository contains a vulnerable web application created as a Proof of Concept PoC to demonstrate an SQL...

cve-2023-41993-test

poc original de po6ix post-exploitation que j'ai copié depuis les exploits regexp de nikiasb et de Linus Henze, l'article de Phrack/la chaîne d'exploit Pwn2Own 2018 de 5aelo, le blog/la série YouTube de LiveOverflow...

through_the_wire

À travers le fil À travers le fil est une preuve de concept d'exploitation pour CVE-2022-26134, une injection OGNL affectant Atlassian Confluence Server et Data Center versions = 7.13.6 LTS et = 7.18.0 « Latest ». Il s'agissait à l'origine d'un zero-day exploité dans la nature. Avis du fournisseu...

godoh

🕳 godoh Une preuve de concept de commande et contrôle via DNS-over-HTTPS introduction godoh est une preuve de concept de framework de commande et contrôle, écrite en Golang, qui utilise le DNS-over-HTTPS comme support de transport. Les fournisseurs actuellement supportés incluent Google,...

CVE-2019-9081_PoC

CVE-2019-9081poc Poc for CVE-2019-9081, this CVE is just a new POP chain. The project is a pre-built vulnerable Laravel 5.7.x application with an entry point for POI vulnerability at URI /deserialize POST-request. Lab setup: Starting the vulnerable application: $ git clone...

Apache-Log4j-POC

Apache-Log4j-POC CVE-2021-44228 Preuve de concept de la vulnérabilité de recherche LDAP d'apache log4j Vous pouvez en savoir plus sur la vulnérabilité ici : https://blog.cloudflare.com/inside-the-log4j2-vulnerability-cve-2021-44228/ Comment exécuter le serveur ldap fourni qui renvoie un objet...