232405 matches found
Strapi-CVE-2019-1881
Strapi-CVE-2019-1881 by Kynda 1. pip install requests 2. python3 exploit.py :...
CVE-2020-0796-LPE-EXP
CVE-2020-0796-LPE-EXP Windows SMBv3 LPE exploit compiled version Source project from: https://github.com/danigargu/CVE-2020-0796 Compilation environment: Win10 1909, VS2019 Tested x64 version Exp, x86 version not tested due to lack of environment...
glass-cage-i18-2025-24085-and-cve-2025-24201
Original Fork Network Left Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-24201 – WebKit Remote Code Execution CVE-2025-24085 – Core Media Privilege Escalation Reported to Apple: January 9, 2025 Patched: February–March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 CVSS Base Score...
CVE-2017-1000250-PoC
CVE-2017-1000250-PoC Proof of concept exploit script for CVE-2017-1000250. Written while researching for the essay in TTM4137...
CVE-2018-7600-Drupal7
CVE-2018-7600-Drupal7 CVE-2018-7600【Drupal7】Batch scanning tool. 主文件：CVE-2018-7600-Drupal7.py Main file: CVE-2018-7600-Drupal7.py 其实本质是封装了whoami的exp In essence, it encapsulates the whoami exploit Drupal7/8的原理是一样的但该脚本当是只做了7的适配 Drupal7/8 principles are the same, but this script currently only adapt...
CVE-2023-36802-MSKSSRV-LPE
CVE-2023-36802 MSKSSRV.sys Local Privilege Escalation PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy which suffers from a type confusion vulnerability. This proof-of-concept is modeled after the write-up done by Benoît Sevens @benoitsevens. The article can be found here:...
cve-2017-9805.py
CVE-2017-9805.py 1. Better Exploit Code For CVE 2017 9805 apache struts 2. Should be mostly error proof Why Recode? Found that most of the exploit code online simply used string concatenation to insert user supplied commands and insert into an XML string. This isnt very reliable as XML requires...
MS17-010
MS17-010 MS17-010 CVE-2017-0143 - Python3 Script python3 exploit.py target...
CVE-2019-13764
CVE-2019-13764 A full exploit written by Haboob Research Team Tested on V8 version 8.0.0 on Linux ubuntu 18.04 Detailed blogpost about this vulnerability: https://blog.haboob.sa/blog/cve-2019-13764-from-root-cause-to-bash...
CVE-2021-32157
CVE-2021-32157 Make it possible to build a vulnerable webmin virtual environment as a container using docker Build If there is an error related to download, please comment on line 15 of dockerfile and run line 14 of dockerfile. docker build -t VulnWebmin . docker run --name VulnWebmin -d --rm -p...
F5-CVE-2022-1388-Exploit
F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage Check against single host python3 CVE-2022-1388.py -v true -u targeturl Attack host and test command python CVE20221388.py -a true -u targeturl -c command Attack list of hosts python CVE20221388.py -s true -f file...
CVE-2019-0604
1. Analysis of k8gege's cve-2019-0604-exp.py k8gege's script https://github.com/k8gege/CVE-2019-0604 Honestly, k8gege's Python script is a bit fancy, with a large number of hexadecimal strings split into payload1, 2, 3. Devious. The Python script sends a remote POST payload, which after...
DirtyCow-EXP
DirtyCow-EXP Compiled Dirty Cow vulnerability CVE-2016-5195 EXP, divided into Linux platform and Android platform. For detailed vulnerability reproduction, please refer to: https://brucetg.github.io/2018/05/27/DirtyCow%EF%BC%88%E8%84%8F%E7%89%9B%EF%BC%89%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/...
CVE-2021-4034
CVE-2021-4034Reverse shell Exploit for Local Privilege Escalation Vulnerability in polkit’s pkexec...
CVE-2019-11510-1
CVE-2019-11510-1 Exploit for Arbitrary File Read on Pulse Secure SSL VPN CVE-2019-11510 python usage: python CVE-2019-11510.py https://x.x.x.x 参考链接： https://hackerone.com/reports/591295 https://github.com/projectzeroindia/CVE-2019-11510...
CVE-2018-15961
CVE-2018-15961.py An exploit for CVE-2018-15961...
cve-2017-7269-tool
cve-2017-7269 webshell and shellcode tool build csc cve-2017-7269.cs usage CVE-2017-7269 parms Header: -h set host for If header -p set port for If header -s set scheme for If header -l length of physical path WebShell: -w upload webshell to server -wp path of webshell to save ShellCode: -c execu...
dirty_sock
dirtysock Local Privilege Escalation via snapd CVE-2019-7304 Remastered PoC exploit Credit goes to initstring. Original dirtysock. Usage Wait 40 seconds before executing the script again otherwise it sucks. chmod u+x lpe.py ./lpe.py...
CVE-2019-18634
CVE-2019-18634 I wrote this exploit for Linx Mint 19.1 so probably it'll not work for other distributions. If you're exploint a real environment I recommend you to use Salem Rashid's exploit version, which has the proper offsets for other sudo versions. This is just an exploit for this specfic OS...