exp_hub

0x01 Note This project is only for legal penetration testing and enthusiast reference learning. Please comply with the "Cybersecurity Law of the People's Republic of China" and corresponding local laws. It is prohibited to use this project for illegal operations, otherwise you will bear the...

CVE-2018-15473

Updating exploit from python 2 to python 3. Please only use ethically :...

CVE-2017-16997-poc

Usage Run ./CVE-2017-16997.sh . If run as non-root user, make sure you can elevate to root via sudo. Details 1. https://nvd.nist.gov/vuln/detail/CVE-2017-16997...

CVE-2022-32981

CVE-2022-32981 poc for CVE-2022-32981 under work needs testing + adjusting the offset to the correct one for exploit function...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

CVE-2017-15950

CVE-2017-15950 PoC exploit for vulnerability CVE-2017-15950 SyncBreeze XML Parser and/or Sync functionality Stack-Based Buffer Overflow. Usage When running the XML payload generator, the script will output a XML file xplSyncBreeze.xml containing the payload to import using SyncBreeze. python3...

copy-fail-CVE-2026-31431-shell

CVE-2026-31431 - copyfail shell Local privilege escalation via AFALG socket + splice page-cache overwrite. Overwrites a read-only SUID binary /usr/bin/su with a minimal ELF that calls setuid0 + execve"/bin/sh". No race condition, no per-distro offsets, single shot. $ ./copyfailexp.sh Kernel:...

CVE-2023-20052

CVE-2023-20052 Exploit Functional, self-developed Proof-of-Concept PoC exploit for CVE-2023-20052 , a vulnerability in ClamAV versions = 1.0.0, = 0.105.1, and = 0.103.7 enabling arbitrary file read via XML Entity Expansion XXE during DMG file parsing. This repository provides an original,...

CVE-2014-6287

CVE-2014-6287 python3 script Usage: 1. Start a local smb service hosting nc.exe 2. Execute exploit script to getshell...

CVE-2024-22262

Spring CVE-2024-22262 Proof of Concept This repo contains a Development Container environment and Spring application of the correct version specifically to explore this CVE. Setup Instructions Clone the repo to your machine and use Docker and your favorite IDE. OR Use GitPod online with...

CVE-2020-8423

CVE-2020-8423 Research based on https://ktln2.org/2020/03/29/exploiting-mips-router/testing-environment hook.c is customized especially open vmlinux version 2.6.31...

CVE-2024-32002

CVE-2024-32002 PoC Exploit for CVE-2024-32002...

CVE-2022-22947

CVE-2022-22947 SpringCloudGatewayRCE Code By:Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read online Cybersecurity Law of the...

CVE-2022-0847

gcc exploit.c -o exploit -std=c99 ./exploit Usage: ./exp TARGETFILE OFFSET DATA In the /etc/passwd file, find the offset of the normal user's uid, change the uid to 0, then log in again to get root privileges. Scope of Impact Linux Kernel version = 5.8 Linux Kernel version 5.16.11 / 5.15.25 /...

CVE-2026-42758

CVE-2026-42758 CVE-2026-42758 WebinarIgnition Exploit Usage Examples Basic Usage python3 exploit.py https://target.example.com -e [email protected] Specify Webinar Page python3 exploit.py https://target.example.com -e [email protected] -w https://target.example.com/webinar/my-webinar/...

CVE-2024-24919-POC

CVE-2024-24919 PoC 🚀 🔥 Description This script automates the exploitation of CVE-2024-24919 Checkpoint Security Gateway Unauthorized Information Disclosure. 📌 Features ✅ Single & Bulk URL Testing ✅ Automated Exploitation ✅ Simple & Fast 🛠️ Usage Clone this repo and run the script: git clone...

ThinkAdmin-CVE-2020-25540

ThinkAdmin-CVE-2020-25540 ThinkAdmin CVE-2020-25540 POC Usage $ python3 exploit.py -t -c...

CVE-2023-4165

CVE-2023-4165 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u 单个url目标文件 python3 CVE-2023-4165.py -f url.txt Then verify the address...

React2shell-CVE-2025-55182-Exploit

This repository does not have a README...

CVE-2017-9805-Apache-Struts-Fuzz-N-Sploit

CVE-2017-9805StrutsFuzzNSploit Just a terrible script I wrote in Python3 to fuzz and if desired, exploit via Metasploit: CVE-2017-9805 RCE for CTF's or whatever in accordance with the thugcrowd DWTFYW Public License I stole from those cool cats =...