CVE-2012-2982

CVE-2012-2982 Python POC for CVE-2012-2982 Webmin 1.580 improved from the original by user OstojaOfficial This is an improved version of the original script that allows the user to see the input data format without needing to view the entire script to discover it. To achieve this, that section of...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 This repository contains ZeroZenX’s research artifacts and a fully operational exploit implementation for CVE-2025-61882, provided to support defensive research, incident response, detection engineering, and patch verification in authorized environments...

POC-CVE-2022-28117

CVE 2022 28117 PoC Python with slight modifications Usage : python3 .\poccve2022-28117.py -x file:///etc/passwd -u username -p password http://192.168.148.140/navigate...

node-cve-2018-4407

node-cve-2018-4407 Node.js PoC exploit code for CVE-2018-4407 Author: Sam Decrock This script is based on the scapy script provided by Zuk: iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC in a tweet: pip install scapy sudo scapy sendIPdst=“Target...

exploits

Exploits My personal exploit collection of n-days, CTFs, 0days, kernels, browsers and lots of cool stuff :D...

PS5-UMTX-Jailbreak

PSFree version 1.4.0 PSFree is a WebKit exploit using CVE-2022-22620 to gain arbitrary read/write. vulnerable: PS4 6.xx-9.xx tested 6.00-9.60 PS5 1.xx-5.xx tested 1.00-5.50 CREDITS: anonymous for PS4 firmware kernel dumps janisslsm from ps4-dev on discord.com contributed ROP chain managers for 8....

CVE-2017-14980

CVE-2017-14980 This was my attempt at making an exploit for the SyncBreeze v10.0.28 exploit...

CVE-2025-29824-Exploit

🚨 CVE-2025-29824 Exploit: PipeMagic Ransomware Chain 📌 Critical Vulnerability Overview Privilege Escalation Flaw in Windows CLFS → SYSTEM Privilege Hijack Exploited in Active Ransomware Attacks by Storm-2460 Threat Group 🖥️ Affected Systems Expand System List 🧩 Exploit Chain Workflow graph LR...

bhyve

bhyve Exploit code for CVE-2022-23087...

livewire-honeypot

Livewire Honeypot A high-interaction honeypot that masquerades as a vulnerable Laravel/Livewire application. It captures exploit attempts targeting known Livewire CVEs, stores uploaded malicious files webshells and remote code execution RCE payloads with SHA-256 deduplication, and optionally...

CVE-2014-6271

CVE-2014-6271 - Shellshock.py Shellshock exploit aka CVE-2014-6271. Tested on Bash 3.2 and Bash 4.2. For more information about the vulnerability visit : https://nvd.nist.gov/vuln/detail/CVE-2014-6271 Note The exploit was mainly tested on Hack The Box in the following boxes: Beep box :...

CVE-2024-23222-Coruna-Exploit-Kit-Deobfuscated

🏴‍☠️ Coruna iOS Exploit Kit: CVE-2024-23222 Research 📌 Overview This repository contains a comprehensive technical analysis and deobfuscation research of the Coruna iOS Exploit Kit. The research focuses on documenting how the exploit chain targets CVE-2024-23222 — a high-severity type confusion...

CVE-2022-25636-PipeVersion

CVE-2022-25636 pipe version Using pipe-primitive to exploit CVE-2022-25636, so no kaslr leak nor smap smep ktpi bypass is needed : Q: What is pipe-primitive? A: https://github.com/veritas501/pipe-primitive...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

CVE-2019-17662

CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...

CVE-2018-1335-EXP-GUI

CVE-2018-1335 GUI Version EXP...

CVE-2024-24919

CVE-2024-24919 Usage Usage: ./CVE-2024-24919.sh -i -p -f Specifying an IP with -i ./CVE-2024-24919.sh -i 190.XXX.XXX.XXX Check multiples IP with -f ./CVE-2024-24919.sh -f uniq.txt File example 192.168.0.1 192.168.0.2 192.168.0.3 ... 192.168.0.20...

annotated-fbi-tbb-exploit

This repository does not have a README...

CVE-2025-31161_exploit

CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...