232334 matches found
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code execution See our blog post for technical details https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoC in Action python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoam...
CVE-2020-1938-Clean-Version
CVE-2020-1938-Clean-Version CVE-2020-1938GhostCat clean and readable code version Me...
CVE-2022-36804-PoC-Exploit
CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with this exploit. Note: this exploit includes automatic repo detection which ...
dahua-cve-research
Dahua IP Camera CVE Exploit Tools ⚠️ UNDER DEVELOPMENT — These scripts are based on published CVE details and require further testing against vulnerable devices to confirm full functionality. Research and proof-of-concept scripts for four critical Dahua IP camera vulnerabilities. ⚠️ LEGAL...
shannon
!NOTE php2shell upgrade verification: confirm your PHP apps are patched against the php2shell RCE chain with the experimental --exp-php2shell probe. See the test results. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, a...
GitPython-Exploit-CVE-2022-24439
GitPython-Exploit Practical Pentest...
CVE-2023-22515-Exploit-Script
Automated Exploitation of CVE-2023-22515 - Confluence Privilege Escalation This repository contains an automated exploit script for CVE-2023-22515, a critical vulnerability in Atlassian Confluence that allows unauthorized attackers to create administrative accounts and gain full control of...
PS5-UMTX-Jailbreak
PSFree version 1.4.0 PSFree is a WebKit exploit using CVE-2022-22620 to gain arbitrary read/write. vulnerable: PS4 6.xx-9.xx tested 6.00-9.60 PS5 1.xx-5.xx tested 1.00-5.50 CREDITS: anonymous for PS4 firmware kernel dumps janisslsm from ps4-dev on discord.com contributed ROP chain managers for 8....
CVE-2016-4010
CVE-2016-4010 CVE-2016-4010 Run exploit.php to generate the json payload Run exploit.py with generated payload in triggervulnerabilitypayload...
pub
❤ Be a Hero, tip a 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 Exploit PoCs and tools for vulnerabilities disclosed by tintinweb. pub police line - do not cross ==== police line - do not cross ==== police line - do not cross ==== ==== police lin...
CVE-2022-44149
CVE-2022-44149 POC Exploit for CVE-2022-44149...
CVE-2019-17662
CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...
RunAsWinTcb
RunAsWinTcb Overview RunAsWinTcb uses an userland exploit to run a DLL with a protection level of WinTcb-Light. Overview of the vulnerability and the capabilites of an exploit can be found here: https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387...
CVE-2024-21762
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ CVE-2024-21762...
CVE-2020-0796
CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...
CVE-2018-1235
CVE-2018-1235 A python script that tests for an exploitable instance of CVE-2018-1235. NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 Usage: ./CVE-2018-1235.py -t Target Host -r Your IP This code may be altered to actively exploit the vulnerability. Support for network scopes may be added...
dirty-pipe
Dirty Pipe - CVE-2022-0847 This is simply the code and instructions for how to use Max Kellermann's exploit for CVE-2022-0847 known as Dirty Pipe. Please go to https://dirtypipe.cm4all.com/ to read more about how to exploit works! How to use 1. Download and compile the exploit binary git clone...
msfconsole-termux
msfconsole-termux How To Install Metasploit-Table on the Android Termux pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP msfconsole -q -x "use...
zer0dump
Zer0Dump Zer0dump is an PoC exploit/tool for abusing the vulnerabilities associated with CVE-2020-1472 Zerologon in order to initiate a full system takeover of an unpatched Windows domain controller. Special thanks to @dirkjanm and @SecureAuthCorp...