35 matches found
CVE-2022-1388-Exploit
CVE-2022-1388-Exploit 用于 CVE-2022-1388 F5 Big-IP 的测试与利用脚本 masscheck.py 将接收一个文件输入，在不实际利用漏洞的情况下检查主机是否存在漏洞。 检测： 扫描 /mgmt/tm/util/bash 作为端点，该端点可能出现在 Web 服务器日志中。或者，如果您有 F5 设备，请尽快打补丁，受影响版本如下所示，补丁可从 https://support.f5.com/csp/article/K23605346 获取。 受影响版本 BIG-IP 16.1.0 至 16.1.2（已发布补丁） BIG-IP 15.1.0 至...
CVEsLab
CVEsLab 由 Securi Trust 团队为各种 CVE 编写的一系列概念验证漏洞利用脚本、Docker 实验室环境以及 Securi Trust 团队发现的漏洞。...
Ubiquiti-CVE
Ubiquiti-CVE ⚡ 简单用法 仅可在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 获得授权的渗透测试环境 示例设置： root@kitploit: git clone cd 项目使用 Python，按照以下步骤操作 创建虚拟环境 python -m venv venv 激活虚拟环境 macOS / Linux source venv/bin/activate Windows Git Bash / WSL source venv/Scripts/activate 安装依赖 pip install -r requirements.txt...
dahua-cve-research
大华 IP 摄像头 CVE 漏洞利用工具 ⚠️ 开发中 — 这些脚本基于已发布的 CVE 详情，需要针对易受攻击的设备进行进一步测试，以确认其完整功能。 针对大华 IP 摄像头四个严重漏洞的研究与概念验证（PoC）脚本。 ⚠️ 法律免责声明 root@kitploit: 本软件仅供教育和经授权的安全测试目的使用。 使用这些工具即表示您同意： 1. 您已获得测试目标系统的明确书面授权 2. 您不会将这些工具用于非法活动 3. 您对自己的行为承担全部责任 4. 作者不对任何滥用或损害承担责任 在大多数司法管辖区，未经授权访问计算机系统属于刑事犯罪。 涉及的 CVE CVE| CVSS| 类型|...
CVE-2024-31317-PoC
CVE-2024-31317 漏洞概念验证 CVE-2024-31317 Proof of Concept 本仓库包含针对Android系统的CVE-2024-31317漏洞的概念验证脚本集合。 This repository contains a collection of Proof of Concept scripts for the CVE-2024-31317 vulnerability in Android systems. 脚本说明 Script Description CVE-2024-31317-android11-.sh: 针对Android 11以下设备的漏洞利用脚...
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder...
security-research
security-research Personal CVE PoC repository — exploit scrip...
cyber-punk
Cyber Punk Security Vulnerability Scanner A Claude Code plu...
Exploits-and-code-snippets
Exploits-and-code-snipp...
Exploits-and-code-snippets
Exploits-and-code-snipp...
📄 libtransmission 2.93 Integer Overflow
libtransmission versions 2.93 and below suffer from multiple integer overflows. A remote attacker could create a specially crafted .torrent file which may be small when compressed that exploits these overflows when a victim loads it via Transmission or its command-line interface transmission-cli...
demo_web_attacks
demowebatta...
Exploit for CVE-2024-28397
CVE-2024-28397 js2py Sandbox Escape Exploit A collection of e...
Exploit for CVE-2025-27581
CVE-2025-27581 Exploit scripts for CVE-2025-27581 BasicExplo...
shellshocker-pocs
This repository contains a collection of Proof of Concepts PoCs and potential targets for the Shellshock vulnerability, also known as Bash Bug. The vulnerability affects the Bash shell and allows an attacker to execute arbitrary code by injecting malicious environment variables. The repository...
渗透字典
This repository is an offensive tool for Bug Bounty research and exploitation. The primary CVE ID is not explicitly mentioned, but it appears to be a collection of exploits and techniques for various vulnerabilities. The repository contains a wide range of exploits and techniques, including: 1...
Exploit for Server-Side Request Forgery in Grafana
This is a PoC Proof of Concept repository for various web vulnerabilities, specifically SQL injection and SSRF Server-Side Request Forgery vulnerabilities. The repository contains a list of vulnerabilities, including: CVE-2021-21315: Node.js command injection vulnerability CVE-2020-13379: Grafana...