CSRF-exploit-generator

CSRF-exploit-generator Генератор CSRF -эксплойтов позволяет пользователям создавать форму CSRF-эксплойта с настраиваемыми параметрами. CSRF-exploit-generator Возможности Ввод целевого URL: указывает URL-адрес, который будет использоваться для эксплуатации. Ввод POST-параметров: позволяет добавлят...

pwnkit-exploit

pwnkit CVE-2021-4034 Esempio di exploit per l'escalation dei privilegi Questo repository contiene un exploit per CVE-2021-4034, un'escalation locale dei privilegi in pkexec. Questa implementazione si basa su quella descritta nella divulgazione della CVE, che dovreste leggere. Se funziona sulla...

Phpweb-Getshell-py

Phpweb-Getshell-py Phpweb=2.0.35 उपयोग ट्यूटोरियल के लिए, कृपया www.0-sec.org देखें...

exploits

Repositório de Exploits Públicos de Prova de Conceito Este repositório contém exploits públicos de prova de conceito PoC para várias vulnerabilidades que descobri ao longo do tempo. Esses exploits PoC são compartilhados para fins educacionais e para demonstrar os riscos potenciais associados a...

React2Shell

React2Shell - CVE-2025-55182 और CVE-2025-66478 लेखक: LAKSHMIKANTHAN K letchupkt Instagram: @letchupkt संस्करण: 2.0.0 Obfuscated दिनांक: 2025-12-07 🚀 त्वरित शुरुआत स्कैनर चलाएँ root@kitploit: python react2shell.py बस इतना ही! स्कैनर यह करेगा: 1. अपनी अखंडता सत्यापित करेगा 2. कोड को डीकंप्रेस करेगा...

PrintNotifyPotato

PrintNotifyPotato PrintNotifyPotato Eine weitere Potato, die den PrintNotify-COM-Dienst zum Anheben von Rechten nutzt Für Windows 10 - 11 und Windows Server 2012 - 2022 Verwendung root@kitploit: C:\Windows\Temp PrintNotifyPotato.exe aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa...

shodscript

ShodScript Automatizza l'esecuzione di exploit e PoC sui risultati di ricerca di Shodan. Interroga Shodan, filtra i target ed esegui i tuoi script contro ogni corrispondenza - in modo concorrente, con output strutturato ed esportazione. Perché Hai uno script PoC che accetta un IP e una porta. Vuo...

inception

नोट: यह टूल अब सक्रिय विकास के अधीन नहीं है, कृपया PCILeech देखें। INCEPTION Inception एक भौतिक मेमोरी हेरफेर और हैकिंग टूल है जो PCI-आधारित DMA का दोहन करता है। यह टूल FireWire, Thunderbolt, ExpressCard, PC Card और किसी भी अन्य PCI/PCIe HW इंटरफेस पर हमला कर सकता है। Inception का लक्ष्य DMA का...

CVE-2024-1086

CVE-2024-1086 यूनिवर्सल लोकल प्रिविलेज एस्केलेशन Proof-of-Concept एक्सप्लॉइट CVE-2024-1086 के लिए, जो v5.14 और v6.6 के बीच के अधिकांश Linux कर्नेल पर काम करता है, जिसमें Debian, Ubuntu और KernelCTF शामिल हैं। KernelCTF इमेजेज में सफलता दर 99.4% है।...

morris-worm

इस रिपॉजिटरी में README नहीं है।...

webapp-exploits

webapp-exploits Entwicklung von Webanwendungs-Exploits...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

WordPress Canto 1.3.0 - Blind Server-Side Request Forgery

WordPress Canto plugin 1.3.0 is susceptible to blind server-side request forgery. An attacker can make a request to any internal and external server via /includes/lib/detail.php?subdomain and thereby possibly obtain sensitive information, modify data, and/or execute unauthorized administrative...

Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities

Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the 1 file parameter to document.php or 2 backtopage parameter in a create action to comm/action/fiche.php. id:...

Joomla! Component SMEStorage - Local File Inclusion

A directory traversal vulnerability in the SMEStorage comsmestorage component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. id: CVE-2010-1858 info: name: Joomla! Component SMEStorage - Local File...

Kirona Dynamic Resource Scheduler - Information Disclosure

Kirona Dynamic Resource Scheduler is susceptible to information disclosure. An unauthenticated user can directly access /osm/REGISTER.cmd aka /osmtiles/REGISTER.cmd, which contains sensitive information with exposed SQL queries, such as database version, table name, and column name. id:...

Casdoor 1.13.0 - Unauthenticated SQL Injection

Casdoor version 1.13.0 suffers from a remote unauthenticated SQL injection vulnerability via the query API in Casdoor before 1.13.1 related to the field and value parameters, as demonstrated by api/get-organizations. id: CVE-2022-24124 info: name: Casdoor 1.13.0 - Unauthenticated SQL Injection...

Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion

In avataruploader v7.x-1.0-beta8 the view.php program doesn't restrict file paths, allowing unauthenticated users to retrieve arbitrary files. id: CVE-2018-9205 info: name: Drupal avataruploader v7.x-1.0-beta8 - Local File Inclusion author: daffainfo severity: high description: In avataruploader...

OpenEMR <5.0.2 - Local File Inclusion

OpenEMR before 5.0.2 is vulnerable to local file inclusion via the fileName parameter in custom/ajaxdownload.php. An attacker can download any file that is readable by the web server user from server storage. If the requested file is writable for the web server user and the directory...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...