fwbt

fwbt Writeup: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893 Without any configuration it will scan for Firewalla's in local proximity and leak th...

CVE-2023-32749

PoC for CVE-2023-32749 This is a quick and dirty PoC I wrote for CVE-2023-32749 for Pydio Cells. The scripts creates a new user account with the all the roles available when provided with a valid credential. All credits goes to the original researchers. Installation The only requirements is the...

CVE-2018-15473-User-Enumeration-

CVE-2018-15473 – SSH Username Enumeration A Python tool developed by me to identify valid SSH usernames by exploiting CVE-2018-15473. Target Information Service: SSH Version: OpenSSH 5.8p1 Debian 1ubuntu3 Operating System: Ubuntu Linux Protocol: SSH-2.0 Assessment: Tested for CVE-2018-15473 SSH...

CVE-2022-37434_poc

CVE-2022-37434poc Crees que no lo hace, pero lo hace...

cve-2025-24054-lab

CVE-2025-24054 — Detection & Mitigation Lab Project log for a defensive security lab on CVE-2025-24054 , the Windows New Technology LAN Manager NTLM Hash Disclosure Spoofing vulnerability, under the assumption that the affected system cannot be patched short-term. Blue-team educational project...

Android-Passive-Location-Tracker

Android-Passive-Location-Tracker Location tracking app without explicitly asking any location permissions! Makes use of CVE-2018-15835 which makes use of Android OS information leakage through broadcasting intents...

Werkzeug-CVE-2022-29361-PoC

Werkzeug-CVE-2022-29361-PoC...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Herramienta masiva automática para comprobar la vulnerabilidad en CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Instalar JQ Linux : comando apt-get install jq -y Windows...

PoC-AutoSync

🧠 PoC-AutoSync-Github Automatically collects public Proof-of-Concept PoC exploits from poc-in-github.motikan2010.net and keeps the database up to date with automatic updates. Use responsibly — for research and defensive purposes only. Inspired by nomi-sec/PoC-in-GitHub. 🔍 Overview This repository...

omae-wa-cheese-da

omae-wa-cheese-da Image GPU arbitrary physical R/W CVE-2025-21479 - KASLR leak - SELinux permissive - RKP-safe init-hook root server & DEFEX bypass custom binary exec LDPRELOAD It takes about 6 mins.. Be patient. I'll optimize it later. Tested devices Galaxy Z Flip 5 SM-F731N Firmware:...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026 Multi-CVE CTI Investigation CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot...

CVE-2025-48384-p

This repository does not have a README...

system_bt_aosp10_cve-2022-20140

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

nessus-vulnerability-scanning-lab

Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...

AndroidWebviewInjectDemo

AndroidWebviewInjectDemo An app demo for test android webview security issue: CVE-2012-6636...

Exploitation-de-la-vuln-rabilit-CVE-2015-5254-

Exploitation of CVE-2015-5254 Vulnerability CVE-2015-5254 is a security vulnerability in Apache ActiveMQ, a widely used open source message broker for inter-application communication. This vulnerability affects ActiveMQ versions up to 5.13.0 and stems from the lack of filtering on incoming JMS...

openSSL_1.0.1g_CVE-2014-3507

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

centos-dirty-cow-ansible

Ansible CVE-2016-5195 mitigation playbook Ansible playbook to mitigate CVE-2016-5195 on CentOS/Scientific Linux with SystemTap. Automating this mitigation recipe found on Red Hat Bugzilla: https://bugzilla.redhat.com/showbug.cgi?id=1384344c13 This playbook install Kernel debuginfo packages and...

CVE-2023-4357-Chrome-XXE

Tool Introduction The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors. The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitor...