CVE-2021-44228

CVE-2021-44228 Log4j2 Component Command Execution RCE Code By: Junsheng @Orange Cyber Security Lab Orange Cyber Security Lab https://0range.team/ 0x00 Risk Overview This tool is for authorized security testing only. Unauthorized attacks on illegal sites are prohibited. Read online 《Cybersecurity...

Ducky-Exploit

Ducky-Exploit Introduction Ducky Exploit is python framework which helps as to code Digispark as Rubber Ducky This script has been tested on Kali Linux 18.2 Ubuntu 18.04 Windows Works with both Python2 and Python3 Keyboard Support Type US Type Keyboard Usage git clone...

root-sonim-xp3800

Root Sonim XP3800 Root access for the Sonim XP3800. Two methods are available — choose whichever fits your situation. Root Manager App The Root Manager app exploits CVE-2019-2215 a binder use-after-free kernel vulnerability to gain root directly on the device. No computer, no bootloader unlock, n...

ipwndfu

Open-source jailbreaking tool for many iOS devices Readdisclaimer before using this software. checkm8 permanent unpatchable bootrom exploit for hundreds of millions of iOS devices meant for researchers, this is not a jailbreak with Cydia yet allows dumping SecureROM, decrypting keybags for iOS...

Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

CVE-2023-2640-CVE-2023-32629

GameOverlay Ubuntu Privilege Escalation CVE-2023-2640 https://www.cvedetails.com/cve/CVE-2023-2640/ On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on t...

Router-Exploit-Shovel

Router Exploit Shovel Automated Application Generation for Stack Overflow Types on Wireless Routers Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE simple poc...

cve-2023-29360

PoC for CVE-2023-29360 Exploit targeting MSKSSRV.SYS driver Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Thomas Imbert @masthoon from Synacktiv @Synacktiv...

CVE-2018-20062

CVE-2018-20062 thinkphp 5.0.23 Suitable for vulhub thinkphp vulnerability I'm a noob. I'll optimize it gradually later. Please don't criticize, experts...

CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...

CVE-2021-2109_poc

weblogicCVE-2021-2109poc weblogic CVE-2021-2109 batch verification POC Usage: First, download JNDIExploit.jar on another server and run java -jar JNDIExploit.jar -i ip Then put the IPs to be checked in urls.txt, and run this script...

CVE-2018-8639-EXP

CVE-2018-8639-EXP CVE-2018-8639 EXP Usage: CVE-2018-8639-EXP.exe command etc 1. Most open-source samples may no longer be capable of bypassing antivirus; modifications are required. 2. I believe that open-sourcing the core code can help those who want to learn. 3. I have learned a lot from the...

uTorrent-CVE-2020-8437

uTorrent-CVE-2020-8437 Exploit for uTorrent vulnerability CVE-2020-8437 by mavlevin...

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution Exploit for CVE-2007-4560 ClamAV Milter Sendmail 0.91.2 Remote Code Execution The exploit is for educational purposes only and should not be used for malicious purposes...

CVE-2022-21661

CVE-2022-21661 CVE-2022-21661 exploit for Elementor custom skin...

MS16-032

MS16-032CVE-2016-0099 for SERVICE ONLY this exploit can only use on SERVICE do logical exploit,on logical exploits...

splitting-the-email-atom

Splitting The Email Atom: Exploiting Parsers To Bypass Access Controls Welcome to the repo. This repository contains all the materials for my talk "Splitting The Email Atom:Exploiting Parsers To Bypass Access Controls". You can read about this research at:...

CVE-2023-4165

CVE-2023-4165 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u 单个url目标文件 python3 CVE-2023-4165.py -f url.txt Then verify the address...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156: Sudo heap overflow exploit for Debian 10 Vulnerability analysis and exploit development: https://syst3mfailure.io/sudo-heap-overflow Exploit designed for: Sudo: Version 1.8.27 1.8.27-1+deb10u1 Checksum sha256:...