ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

CVE-2024-9264

CVE-2024-9264 python CVE-2024-9264.py '' -u '' -p '' -c ''...

CVE-2022-26134-Exploit-Detection

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requisites 1. ClamAV Clone this repository or download the Yara rule on your confluence server We are using the Yara rule provided by volexity/threat-intel who first unveiled this vulnerability. Git Clone git clone...

Copy-Fail-Exploit-CVE-2026-31431

Copy-Fail-Exploit-CVE-2026-31431 unning the Python Exploit 1. Execute directly python3 copyfailexp.py Compiling the C Version 1. Compile gcc copyfailexp.c -o copyfail 2. Make executable chmod +x copyfail 3. Run exploit ./copyfail su...

CVE-2004-0789-DDOS

sudo python3 exploit.py Enter the DNS server IP address: IP Enter the number of requests to send: NUMBER...

krie

KRIe KRIe is a research project that aims to detect Linux Kernel exploits with eBPF. KRIe is far from being a bulletproof strategy: from eBPF related limitations to post exploitation detections that might rely on a compromised kernel to emit security events, it is clear that a motivated attacker...

cve-2023-51467

Go-Exploit for CVE-2023-51467 This repository contains a go-exploit for Apache OFBiz CVE-2023-51467. The implementation contains target verification, a version scanner, and an in-memory Nashorn reverse shell as the payload requires the Java in use supports Nashorn. The weaponization process is...

iomfb-exploit

Write up is here: https://jsherman212.github.io/2021/11/28/poppingios14withiomfb.html Exploit for CVE-2021-30807. If you really want to build a jailbreak out of it, it will require tuning for your device and iOS version because I have no info leak to use for this. To tune for A11 and below, use...

io_uring_LPE-CVE-2024-0582

iouringLPE-CVE-2024-0582 LPE exploit for CVE-2024-0582. I will not be releasing a write-up for this vulnerability as my method of exploitation is almost the same as for CVE-2023-2598. You can read the exploitation section of my write-up on CVE-2023-2598 to understand this exploit as well:...

Tentacle

Tentacle .. . . .. | || || \ | | | | / \ / || | | | 1.0.0stable ---| |----| | | | | ---| |---- / ^ \ | ,----'| | | | | | | | | . | | | / /\ \ | | | | | | | | | | | |\ | | | / \ | ----.| ----.| | || |||| | || // \ ||||| http://www.orleven.com Tentacle is a POC vulnerability verification and...

tactical-exploitation

tactical-exploitation "The Other Way to Pen-Test" -- HD Moore & Valsmith I've always been a big proponent of a tactical approach to penetration testing that does not focus on exploiting known software vulnerabilities, but relies on old school techniques such as information gathering and brute...

ipwndfu

Open-source jailbreaking tool for many iOS devices Readdisclaimer before using this software. checkm8 permanent unpatchable bootrom exploit for hundreds of millions of iOS devices meant for researchers, this is not a jailbreak with Cydia yet allows dumping SecureROM, decrypting keybags for iOS...

CVE-2026-25769

CVE-2026-25769 - Remote Code Execution via Insecure Deserialization in Wazuh Cluster A proof-of-concept exploit for CVE-2026-25769, a Remote Code Execution via Insecure Deserialization in Wazuh Cluster Usage: $ python3 poc.py --cmd 'id' Vulnerable Versions Wazuh v4.14.1 Disclaimer This tool is fo...

exploitgym

ExploitGym ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities across userspace programs, Google's V8 engine, and the Linux kernel, designed to evaluate AI agents' ability to develop exploits. Quick start 1. Python deps uv sync --extra proxy 2. Build runtime...

CVE-2019-16662

CVE-2019-16662 The official exploit for rConfig 3.9.2 Remote Code Execution CVE-2019-16662...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

CVE-2024-23897

CVE-2024-23897 - Jenkins Arbitrary File Read Exploit Tool Installation CVE-2024-23897 requires go 1.21 to complete installation. Execute the following command: go install github.com/wjlin0/CVE-2024-23897/cmd/CVE-2024-23897@latest Or download the pre-built binary from release macOS-arm64 macOS-amd...

CVE-2021-31630-HTB

CVE-2021-31630 Exploit CVE-2021-31630 Exploit PoC for OpenPLC on WifineticTwo box Hack The Box, This script serves as a Proof of Concept PoC exploit for CVE-2021-31630, targeting the OpenPLC service running on the WifineticTwo box on the Hack The Box platform. Usage python exploit.py -ip -p -u -p...

Exploit-CVE-2026-24061

exploit in bash telnet CVE-2026-24061...

killchain

killchain “Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependent tool sets are: 1. Tor -- For the console build-in Anonymizer. 2. Set -- Social-Engineer...