jackit

JackIt JackItは気に入っていますか？でもラップトップを持ち歩きたくない？こちらをチェックしてみてください。 概要 これはBastilleのMouseJackエクスプロイトの部分的な実装です。詳細はmousejack.comをご覧ください。全功績は、CrazyRadio PAドングルで動作するライブラリを書き、この問題を発見したBastilleのチームに帰属します。また、KeySweeperのSamy Kamkar、KeyKerikiのThorsten SchroederとMax Moser、そしてTravis Goodspeedにも感謝します。私たちは巨人の肩の上に立っていま...

CVE-2025-38678_POC

CVE-2025-38678POC The first poc for CVE-2025-38678 Today 2026/1/21 while searching Google, I found an article written by the master who discovered this vulnerability, confirming the author's speculation that the exploitation technique for this vulnerability follows past exploitation methods...

DFSCoerce

DFSCoerce PoC for MS-DFSNM coerce authentication using NetrDfsRemoveStdRoot and NetrDfsAddStdRoot found by @xctde methods. Documentation: https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-dfsnm/95a506a8-cae6-4c42-b19d-9c1ed1223979 Inspired by: PetitPotam @topotam77...

GenCrushSSTIExploit

EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...

DirtyPipe-Android

DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary root PoC for Android. Targets Currently only run on Pixel 6 with security patch level from 2022-02-05 to 2022-04-05. Don't use on other devices or other versions. It must crash reboot. Dirty Pipe is finally patched on 2022 May security upda...

CVE-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045 Hi! I refactored the original script to use requests library, the other libraries were causing some errors to me. Hope it helps! Usage: python3 cve-2017-5638 url cmd-command...

Xiaomi_Mi_WiFi_R3G_Vulnerability_POC

This repository does not have a README...

CVE

Proof-of-Concept Exploits Repository This repository contains my own collection of proof-of-concept PoC exploits created for security testing and research purposes. Each folder is organized by CVE identifier for example: CVE-2025-XXXX/, and inside you will find the corresponding exploit code and...

CVE-2022-21907

CVE-2022-21907 Description - POC for CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability. - create by antx at 2022-01-17. Detail - HTTP Protocol Stack Remote Code Execution Vulnerability. - Similar to https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. - This problem...

log4j-shell-poc

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository we have made and example...

CVE-2022-0778-POC

A simple remote triggering POC for CVE-2022-0778 Why While trying to validate whether server implementations on our side where/are vulnerable to CVE-2022-0778, it proved extremely cumbersome to do so remotely. Instructions to create maliciously crafted certificates to trigger the parsing bug in...

CVE-2025-53770

Microsoft SharePoint CVE-2025-53770 POC DISCLAIMER: This code/payload is provided for educational purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments you own or have explicit permission to test. Misuse may violate laws...

rpc2wc

RPC to WebClient The information for this code can be found at this blog post. Recommend reading before attempting to use anything here. Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a proof of...

HugeDirtyCowPOC

"Huge Dirty Cow" POC A POC for the Huge Dirty Cow vulnerability CVE-2017-1000405. Full details can be found here. Before running, make sure to set transparent huge pages to "always": echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

CVE-2019-16278-PoC

CVE-2019-16728-PoC CVE-2019-16728 Reference https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...

cve-2020-28653-poc

Manage Engine OpManager CVE-2020-28653 Proof of Concept This proof of concept detects whether a Manage Engine OpManager instance is vulnerable to CVE-2020-28653. Detection is performed by firing off a request containing the serialized payload to the instance. Upon the payload being deserialized, ...

CVE-2025-24813-vulhub

CVE-2025-24813-vulhub POC script for vulhub environment of CVE-2025-24813 Because many friends are confused about how to exploit this vulnerability, I wrote this script to help everyone with the exploitation in vulhub. Details: vulhub/tomcat/CVE-2025-24813 There is no directly exploitable chain i...

CVE-2024-38077-POC

CVE-2024-38077-POC...

CVE-2025-22131-POC

CVE-2025-22131 POC CVE-2025-22131 XSS Exploit by s0ck37 Reference: https://sploitus.com/exploit?id=152DAC32-8330-54D6-A916-7FC36EAA38B7...

nimcrypt

nimcrypt Nimcrypt는 Nim으로 작성된 .NET PE 크립터입니다. 전적으로 @byt3bl33d3r의 OffensiveNim 프로젝트를 기반으로 합니다: https://github.com/byt3bl33d3r/OffensiveNim 이 도구는 @S3cur3Th1sSh1t가 몇 달 전에 작성한 블로그 포스트에서 영감을 받았으며, 본질적으로 그가 제시한 내용의 완전한 PoC입니다: https://s3cur3th1ssh1t.github.io/Playing-with-OffensiveNim/ .-' '. / \ | ; | ...