CVE-2018-7449

CVE-2018-7449 1. Introduction My tool is written in Python and exploits the CVE-2018-7449 vulnerability to execute a series of commands that will crash the ftp daemon. DISCLAIMER!!! Please note that the use of hacking tools without authorization is illegal and could result in legal problems...

ptrace_may_dream

ptracemaydream CVE-2026-46333 Local privilege escalation exploit for the ptracemayaccess mm=NULL race condition in pidfdgetfd2. When a process is dying and its mm has already been released, the kernel skips the ptrace access check entirely. By racing pidfdgetfd against process exit, an unprivileg...

inetutils-telnetd-cve-2026-24061

GNU Inetutils Telnetd Authentication Bypass CVE-2026-24061 I've documented my walkthrough of the CVE-2026-24061 auth bypass in GNU Inetutils telnetd using Hackviser's lab environment...

cve-2024-20017

cve-2024-20017 exploits NOTE: the x8664 exploits are unlikely to work out-of-the-box against a vanilla build of the wapp daemon as they were written against slightly modified versions of the code. Either way, you're probably unlikely to find this daemon running on x8664...

CVE-2026-24061-telnet2root

CVE-2026-24061 Vulnerability Scanner & Exploit 👨‍💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR Overview This repository contains a vulnerability scanner and an interactive exploit for CVE-2026-24061. This vulnerability affects inetutils-telnetd and potentially other Telnet implementations through...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

opencanary

OpenCanary by Thinkst Canary OpenCanary is a multi-protocol network honeypot. It's primary use-case is to catch hackers after they've breached non-public networks. It has extremely low resource requirements and can be tweaked, modified, and extended. Overview OpenCanary runs as a daemon and...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

CVE-2011-2523

CVE-2011-2523 Exploit for vsFTPd backdoor vulnerabilty written in python using Pwntools Usage pip3 install pwntools python3 ./CVE-2011-2523.py optional...

CVE-2021-3560-exploit

CVE-2021-3560 — Polkit Privilege Escalation CVE-2021-3560 is a local privilege escalation vulnerability in Polkit formerly PolicyKit, the authorization framework used by Linux desktop environments. A local, unprivileged attacker can exploit a race condition in the accounts-daemon D-Bus interface ...

cve-2022-42475

cve-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version dependent and contains some hardcoded offsets which will most likely change from one system to...

ndaal_public_auditd

Linux Audit Daemon Auditd Best Practices and Deployment This repository provides comprehensive best practices for Linux Audit Daemon Auditd configuration and deployment, including an extensive set of security-focused audit rules, an Ansible role for automated deployment and the tools that test th...

CVE-2025-8067

Proof of Concept for CVE-2025-8067 Details are available here: https://github.com/storaged-project/udisks/security/advisories/GHSA-742q-gggc-473g https://www.openwall.com/lists/oss-security/2025/08/28/1 https://access.redhat.com/security/cve/CVE-2025-8067 https://ubuntu.com/security/CVE-2025-8067...

cve-2022-42475

FortiOS SSL-VPN buffer overflow vulnerability cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version...

CVE-2004-2687

CVE-2004-2687 DistCC Daemon Command Execution...

CVE-2017-10617

CVE-2017-10616 & CVE-2017-10617 These two vulnerabilities affect Juniper Contrail version 2.2, 3.0, 3.1 and 3.2: Hard coded credentials CVE-2017-10616 XML External Entity CVE-2017-10617 Vendor security bulletin can be found at Juniper Security Alert JSA10819 2017-10. The vulnerable service in...

CVE-2026-24061-POC

CVE-2026-24061 GNU inetutils-telnetd Remote Authentication Bypass CVSS Score: 9.8 Critical Overview A vulnerability in GNU inetutils-telnetd allows remote attackers to bypass authentication via the NEWENVIRON telnet option. By sending a crafted USER environment variable containing the value "-f...

graph-go

graph-go See your infrastructure. Zero Config. Point graph-go at your stack and get a live, interactive map of every database, table, service, and storage bucket — with real-time health monitoring. ▶ Watch in full quality MP4 graph-go is a CLI-first infrastructure mapper. It auto-discovers your...

poc-cpanel-cve-2026-41940

POC cPanel CVE-2026-41940 A high-performance, multi-threaded security auditing tool designed to detect CVE-2026-41940 , a critical Authentication Bypass vulnerability in cPanel & WHM discovered in April 2026. This tool leverages a CRLF Injection technique in HTTP headers to identify if a cPanel...

CVE-2024-28995

SolarWinds Serv-U Directory Traversal Vulnerability POC cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Analysis https://t.co/JPCd6Y4v1g Shodan Querys product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...