CVE-H3C-Report

H3C GR series router system management has unauthorized access vulnerability Product : GR series router version : all rating : high-risk website : http://www.h3c.com/ Hazards : Attackers can exploit this vulnerability to obtain sensitive information from routers by constructing special request...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x Under discussion and analysis... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ An attacker who has write access to the KeePass configuration file can modify it and inject malicious...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

WordPressMassExploiter

WordPressMassExploiter Mass exploiter of CVE-2015-1579 for WordPress CMS This mass exploiter is based on CVE-2015-1579, discovered by CLAUDIO VIVIANI https://www.exploit-db.com/exploits/36554/ How it works: 1 - I use Selenium Framework to make the search on google. 2 - The results of search, are...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

aerleon

Aerleon Generate firewall configs for multiple firewall platforms from a single platform-agnostic configuration language through a command line tool and Python API. Aerleon is a fork of Capirca with the following major additions: YAML policy and network definition files and pol2yaml, a converter...

behat-config-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install behat-config-leaks Run bellow command to check behat-config-leaks -h Configurations 2. We integrated with the Telegram API to...

CVE-2021-36749

CVE-2021-36749 Apache Druid Arbitrary File Read Affected versions: version = 0.21.1 Either of the following two methods can be used Command Line Method curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Proof of Concept for CVE-2025-8110 - Remote Code Execution in Gogs via symlink bypass and sshCommand injection. Description This exploit abuses a symlink bypass in Gogs API to overwrite .git/config and inject malicious sshCommand that executes a reverse shell...

CVE-2023-29007

CVE-2023-29007 PoC repository for CVE-2023-29007 More information available at: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...

CVE-2023-27524

CVE-2023-27524 Description - POC for CVE-2023-27524: Apache Superset Auth Bypass Vulnerability. - create by antx at 2023-04-27. Detail - Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRETKEY...

CVE-2021-43811

CVE-2021-43811 awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811 NVD Description Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 us...

ThreatResearch

Config Extractors Some used scripts by our team to extract configs from some analyzed samples. PlugX Remcos templateX RedLine Stealer...

CVE-2025-56399

CVE-2025-56399 Mass Exploit CVE-2025-56399 – Remote Code Execution in laravel-file-manager v3.3.1. Exploits misconfigured config in Laravel File Manager to upload and verify a PHP shell via unauthenticated file upload. Installation Download repository git clone...

HikvisionExploiter

HikvisionExploiter HikvisionExploiter is a powerful and automated exploitation toolkit targeting unauthenticated endpoints on Hikvision IP cameras , particularly those running firmware version 3.1.3.150324. It performs: Snapshot access verification Config file retrieval and decryption User...

CVE-2019-20372

Poc for CVE 2019-20372 [email protected] Description NGINX before 1.17.7, with certain errorpage configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

spring-cloud__spring-cloud-config_CVE-2020-5405_2-1-6-RELEASE

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-config/tree/master.svg?style=svg"CircleCI",...

CVE-2025-48384

Overview of CVE-2025-48384 CVE-2025-48384 is a critical vulnerability in Git, the widely used distributed version control system. It involves improper handling of carriage return CR characters in configuration values, which can lead to path traversal issues during submodule checkouts. This flaw...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...