EaST

«EAST» – «Exploits And Security Tools» penetration testing framework. 1. Overview Pentest framework environment is the basis of IT security specialist’s toolkit. This software is essential as for learning and improving of knowledge in IT systems attacks and for inspections and proactive...

external-c2-experiments

External C2: SSH A go-exploit external C2 module that supports reverse SSH shells. It additionally acts as a demonstration of how to integrate external C2 profiles to your favorite payloads. The goal is not to provide a fully weaponized payload with evasion and advanced techniques, but show how t...

CVE-2025-1974-go

Exploit CVE-2025-1974 with a single file. Usage: 1. change serverip and serverport in shell.c 2. make 3. GOOS=linux go build -ldflags="-w -s -extldflags "-static"" -trimpath main.go 4. run main in your controlled pod...

CVE-2021-4034

CVE-2021-4034 This repository contains the exploit for vulnerability CVE-2021-4034 . Steps: 1. gcc cve-2022-4034 -o cve-2022-4034 2 ./cve-2022-4034...

CVE-2016-7255

CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...

CVE-2018-17463

CVE-2018-17463 Completed a working exploit for CVE-2018-17463 for fun. The original writeup that I found on this bug was here http://phrack.org/papers/jitexploitation.html. I just really wanted to change this arb r/w into a fully working exploit. Also I learned the JIT spray technique from the...

CVE-2022-24816

Usage of CVE-2022-24816 script Prerequisites 1. Clone the repository : git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git cd CVE-2022-24816 2. Install dependencies : Ensure you have Python 3 installed. Then, install the required dependencies by running: pip install -r requirements.txt The...

Text4shell-exploit

This repository does not have a README...

exploit-workshop

exploit-workshop In this step by step workshop you'll learn how to exploit various real world vulnerabilities existing in vulnerable versions of packages in a Node.js and Java application. Required software you need to install for this workshop You can do this workshop in 2 different flavours Usi...

CVE-2020-28653

CVE-2020-28653 Version: 2016 - 2020 before patch Usage: python exploit.py http://vuln-web.com...

CVE-2022-23270-PPTP

CVE-2022-23270 A package to detect CVE-2022-23270, a vulnerability in Microsoft's PPTP implementation. Example You can run this logic on the included PCAP in the testing\traces directory: $ zeek -Cr CVE-2022-23270-exploited.pcap packages $ cat notice.log separator \x09 setseparator , emptyfield...

CVE-2024-9474

PAN-OS CVE-2024-0012 and CVE-2024-9474 Python script generated from the blog post : https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/?123 It's all described there My comment on X : https://x.com/k4nfr3/status/1858993646923903103 reverse shell...

CVE-2024-26169-Detail-1

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC Authenticated PoC Demo Usage Unauthenticated PoC Demo Usage Authenticated PoC Proof-of-Concept exploit for CVE-2018-1002105. The current exploit requires create and get privileges on pods and pods/exec. Support has been added for portforward and attach, which require similar...

pacpoc

PACPoC: A local PoC exploit for CVE-2019-2205 To try out this exploit install the "malicious" app PacTest.apk and make exploit.pac available over http with, for example python -m SimpleHTTPServer. Then go to proxy settings on an Android device, select proxy autoconfig, and enter the URL to...

webdav_exploit

webdavexploit An exploit for Microsoft IIS 6.0 CVE-2017-7269 based on https://github.com/edwardz246003/IISexploit but works remotely usage python exploit.py -d http://www.eliuha.com/eliuha...

cve-2023-46747

CVE-2023-46747 Exploit Script This script exploits the F5 BIG-IP TMUI remote code execution vulnerability CVE-2023-46747. It allows an unauthenticated attacker to execute arbitrary commands on a vulnerable F5 BIG-IP system. Table of Contents Features Requirements Usage Parameters How It Works...

CVE-2022-22970

Spring CVE-2022-22970 Proof of Concept This repo contains a Development Container environment and Spring application of the correct version specifically to explore this CVE. Setup Instructions Clone the repo to your machine and use Docker and your favorite IDE. OR Use GitPod online with...

CVE-2011-2523

CVE-2011-2523 usage: CVE-2011-2523.py -h -v RHOST RPORT vsFTPd 2.3.4 CVE-2011-2523 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2011-2523 positional arguments: RHOST target address RPORT target port optional arguments: -h, --help show this help message and exit -v, --version show program'...

Apache_Penetration_Tool

ApachePenetrationTool A vulnerability exploit tool developed using QT C++, for details of the vulnerability analysis, please refer to: https://www.hui-blog.cool/posts/de1f.html Tool interface At the vulnerability selection number, select the vulnerability that needs to be detected. Vulnerability...