Log4Shell-demo

Log4Shell in action This project aims to demonstrate how the Log4Shell / CVE-2021-44228 vulnerability works. Requirements You only need to have Docker installed. Ideally you have two different virtual machines. One for the vulnerable server and one for the malicious server that will host the...

log4shell-poc-lab

Log4Shell POC Demo This repository contains a submodule, clone it with: git clone --recurse-submodules [email protected]:obscuritylabs/log4shell-poc-lab.git Then to start the demo execute: docker compose up To view the exploit creating a file on the victim server, execute: docker compose exe...

docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh ./scripts/deploy.sh to close the...

Follina-attack-CVE-2022-30190-

Follina-attack-CVE-2022-30190- this is a demo attack of FOLLINA exploit , a vulnerability that has been discovered in May 2022 and stood unpatched until June 2022...

Exploit for CVE-2026-12720

CVE-2026-12720 Proof-of-Concept PoC !Licensehttps://img...

Exploit for CVE-2026-15583

CVE-2026-15583-PoC...

Exploit for CVE-2026-27778

PoC-SimulatorCVE-2026-27778...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Demonstration of the Log4jShell Exploit This code may contain...

Exploit for CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk Auth Bypass PoC Pro...

Exploit for CVE-2025-36911

WPair CVE-2025-36911 eg WhisperPair Vulnerability Scanner...

📄 Laravel Pulse 1.3.1 Arbitrary Code Injection

Proof of concept exploit written in PHP for Laravel Pulse version 1.3.1. This version of Laravel Pulse suffers from an arbitrary code injection vulnerability...

EUVD-2008-5514

Malware in sbrugna...

Exploit for CVE-2025-8625

CVE-2025-8625 — PoC Обзор В репозитории храняться исходные...

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-5777 Exploit Tool 🔥 A powerful educational tool...

MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

Description A Remote Code Execution RCE vulnerability exists in the modelscope/ms-swift project due to unsafe use of yaml.load in combination with vulnerable versions of the PyYAML library ≤ 5.3.1. The issue resides in the tests/run.py script, where a user-supplied YAML configuration file is...

Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)

Exploit Title: Pterodactyl Panel 1.11.11 - Remote Code Execution RCE Date: 22/06/2025 Exploit Author: Zen-kun04 Vendor Homepage: https://pterodactyl.io/ Software Link: https://github.com/pterodactyl/panel Version: 1.11.11 Tested on: Ubuntu 22.04.5 LTS CVE: CVE-2025-49132 import requests import js...

Exploit for CVE-2024-55656

CVE-2024-55656 - Redis Stack - RedisBloom Integer Overflow R...

Exploit for Deserialization of Untrusted Data in Google Android

Exploration of CVE-2024-31317 CVE-2024-31317 provides unprivi...

Exploit for Deserialization of Untrusted Data in Apache Parquet_Java

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution...

Exploit for Code Injection in Foxcms

POC - CVE-2025-29306 FOXCMS /images/index.html Code Execution...