zaphoxx-coldfusion

zaphoxx-coldfusion coldfusion exploit based on https://cvedetails.com/cve/CVE-2009-2265/ The main reason I setup a python script for this particular cve was that the metasploit version of the same did not work for me when I tried to solve the HTB machine Arctic. Also it was nice to get some littl...

AOSP-ExploitUserDictionary

AOSP-ExploitUserDictionary PoC Exploit for AOSP UserDictionary Content Provider CVE-2018-9375 Security Advisory https://ioactive.com/wp-content/uploads/2018/08/IOActive-Security-Advisory-AOSP-UserDictionaryProvider-v1.0.pdf More Information...

CVE-2021-22941

Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

CVE-2017-0199

CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter payload to victim without any complex configuration. Release note:...

cve-2023-42115

CVE-2023-42115: Exploit and Payload Generator Scripts This repository contains two Python scripts: 1. exploit.py : A script for exploiting CVE-2023-42115. 2. generatepayload.py : A script for generating reverse shell payloads. Prerequisites Before running the scripts, ensure you have Python 3...

sonos

sonos/amlogic haxx here you will find some exploit & tool code that was part of my presentation about the Sonos One @ Hack in the Box amsterdam 2023. the EL3 exploit can be used to dump your OTP/eFUSE data. sonostool can be used to get decryption keys for Sonos LUKS volumes as well as fetch and...

wp_drupal_timing_attack

wpdrupaltimingattack Python scripts to exploit CVE-2014-9016 and CVE-2014-9034. For legal purposes only...

CVE-2024-23692-RCE-in-Rejetto-HFS

Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...

CVE-2024-4577-RCE-EXP

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP and POC CVE-2024-4577-RCE-EXP CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform RCE EX...

CVE-2023-0315

CVE-2023-0315 The official exploit for Froxlor Remote Code Execution CVE-2023-0315...

root-zte-open

root-zte-open exploit for CVE-2012-4220 working on zte-open Original Advisory: https://www.codeaurora.org/projects/security-advisories/multiple-issues-diagkgsl-system-call-handling-cve-2012-4220-cve-2012 Original Exploit: https://github.com/hiikezoe/breaksetresuid Build $ ndk-build NDKPROJECTPATH...

libperf_event_exploit

This repository has been moved to https://github.com/android-rooting-tools/libperfeventexploit...

CVE-2022-38374

CVE-2022-38374 This repository contains PoC exploit for CVE-2022-38374...

libping_unhash_exploit_POC

This repository does not have a README...

CVE-2024-32019-POC

Privilege Escalation via ndsudo Netdata Local Exploit This POC is used to exploit a vulnerable ndsudo utility bundled with Netdata to escalate local privileges to root. The exploit works by injecting a malicious binary into the user’s PATH that impersonates a trusted command nvme and is executed...

CVE-2022-0995

CVE-2022-0995 This is my exploit for CVE-2022-0995, an heap out-of-bounds write in the watchqueue Linux kernel component. It uses the same technique described in https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit targets Ubuntu 21.10 with kernel...

Metaphor

Metaphor Metaphor - Stagefright with ASLR bypass By Hanan Be'er from NorthBit Ltd. Link to whitepaper: https://raw.githubusercontent.com/NorthBit/Public/master/NorthBit-Metaphor.pdf Twitter: https://twitter.com/HighByte Metaphor's source code is now released! The source include a PoC that generat...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, make pixel For samsung s22, make s22 How to use the exploit The exploit is written to support different...

cve-2026-40369-exploit

This references https://voidsec.com/cve-2026-40369-browser-sandbox-escape/, the approach differs significantly from https://github.com/orinimron123/CVE-2026-40369-EXPLOIT, and since I didn't see any public exp from them, I documented it...

CVE-2022-0995

CVE-2022-0995 CVE-2022-0995 exploit writeups exploit target : linux-5.13.18 refernces : https://docs.kernel.org/core-api/watchqueue.htmloverview https://bsauce.github.io/2022/04/15/CVE-2022-0995/ https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html...