wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 Authenticated RCE This repository contains a proof of concept exploit for CVE-2021-43857 , a Remote Code Execution vulnerability affecting Gerapy -p -L -P Requirements 1. Python 3.x 2. requests and pyfiglet pip install requests pyfiglet 3. Netcat nc...

CVE-2025-55616

CVE-2025-55616 Author: Rana M.Sinan Adil Vulnerability Found in Zsh leading RCE through History Expression Key Points To Run this exploit: just change the ip address and the "p system" in exploit , because i also tried this in my second laptop, and to change it run this following command in gdb...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156-Baron-Samedit This repo contains my work on clumsily implementing a public 1day exploit for the sudo bug. Wish me luck. If you would like to help please feel free. Compile the provided src/sudo sudoedit has been modified to use AFL harness to get input from STDIN AFL Fuzzy loop cras...

exploits

exploits Proof-of-concept scripts for several different security vulnerabilities...

CVE-2024-4358

CVE-2024-4358 / CVE-2024-1800 Telerik Report Server deserialization and authentication bypass exploit chain for CVE-2024-4358/CVE-2024-1800 Technical Analysis A root cause analysis of the vulnerability can be found on my blog Usage python CVE-2024-4358.py --target http://192.168.253.128:83 -c...

mantis_rce

mantisrce Python script to obtain RCE on Mantis Bug Tracker prior to version 1.2.x Check CVE-2008-4687 for additional information...

CVE-2022-45460

Proof of Concept for CVE-2022-45460 Detailed write-up is available here...

totally-not-spyware

TotallyNotSpyware This program is definitely not spyware. Run it on your 64-bit iOS device as soon as possible. Your compliance will be rewarded. Live version at totally-not.spyware.lol Repo structure & building Frontend and WebKit exploit are in /root. Kernel exploit is in /glue. Post-exploitati...

CVE-2019-8449

CVE-2019-8449 Proof Of Concept Exploit for CVE-2019-8449 Jira 8.4.0 User Enumeration Detail: https://www.cvedetails.com/cve/CVE-2019-8449/ Usage $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

Flink-CVE-2020-17518-getshell

Flink-CVE-2020-17518-getshell Exploit Apache Flink CVE-2020-17518 getshell See: https://blog.rakjong.com/2021/01/10/flink-cve-2020-17518-getshell/...

chromium-exploit-dev

Chromium Exploit Development Toolkit A toolkit for weaponizing Chromium vulnerabilities into reliable, cross-platform, full-chain exploits. Overview This project provides a set of powerful helper scripts but requires you to bring your own vulnerabilities. You are responsible for implementing...

exploits

Exploits My personal exploit collection of n-days, CTFs, 0days, kernels, browsers and lots of cool stuff :D...

padre

padre padre is an advanced exploiter for Padding Oracle attacks against CBC mode encryption Features: blazing fast, concurrent implementation decryption of tokens encryption of arbitrary data automatic fingerprinting of padding oracles automatic detection of cipher block length HINTS! if failure...

macOS-Kernel-Exploit

macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild exploitation but still helpful for security...

sony-bravia-root-toolkit

sony-bravia-root-toolkit CVE-2019-2215 & DirtyCOW exploit automation + post-root debloat + Magisk modules for Sony BRAVIA KDL-43W800C...

CVE-2020-0796-EXP

CVE-2020-0796-EXP Windows SMBv3 LPE Exploit Author NewYork @LabDookhtegan Download CVE-2020-0796-EXP Usage CVE-2020-0796-EXP.exe -ip xx.xx.xx.xx -cmd "whoami"...

CVE-2018-4193

exploit for CVE-2018-4193...

CVE-2021-4034-PwnKit-

CVE-2021-4034-PwnKit- Code to exploit CVE-2021-4034...

CVE-2018-4878

CVE-2018-4878 Flash Exploit Poc ' quick and dirty' For more in-depth info http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html Original Poc https://github.com/anbai-inc/CVE-2018-4878 in this repo, I fixed the crash issue, and calculate the right space for the shellcode, check the...