CVE-2023-24078

Description This script is a Proof of Concept PoC exploit I developed for CVE-2023-24078. After trying the publicly available PoCs that were not functional and facing frustration in trying to troubleshoot them, I just created my own script. Usage usage: python3 CVE-2023-24078.py -h -lh LHOST -lp...

Joomla-v4.2.8---CVE-2023-23752

Joomla! v4.2.8 - Unauthenticated Information Disclosure Exploit Script This Bash script exploits an unauthenticated information disclosure vulnerability in Joomla! versions 4.0.0 to 4.2.8. sudo apt-get update sudo apt-get install jq ./exploit.sh http://example.com...

PyInstallerPrivEsc

PyInstallerPrivEsc Exploit for PyInstaller CVE-2019-16784 Article coming soon...

CVE-2019-9053-exploit

CVE-2019-9053-exploit working exploit for CVE-2019-9053 I edited oryginal exploit and now its working well. Oryginal exploit had some problems like missing syntax. Usage: Example usage no cracking password: exploit.py -u http://target-uri Example usage with cracking password: exploit.py -u...

Geoserver-CVE-2023-25157

Geoserver SQL Injection Exploit In this year, a cve got published for Geoserver with the ID CVE-2023-25157. I saw this vulnerability in one of my projects and tried to exploit it. And here it is, the complete exploit. In this repohttps://github.com/0x2458bughunt/CVE-2023-25157 you can use the...

xortigate-cve-2023-27997

xortigate-cve-2023-27997 Exploit for xortigate CVE-2023-27997. It is not usable "as-is" and serves educational purposes. Information Please refer to the blogpost for additional details. This is a POC that demonstrates the bug, nothing more. Example...

CVE-2021-40839

CVE-2021-40839 Dirty Cow kernel exploit without libcrypt dependency...

Centreon-RCE

Centreon-RCE Centreon v.19.04 Remote Code Execution exploit CVE-2019-13024 Revision of https://github.com/mhaskar/CVE-2019-13024 HOW TO USE: 1. Edit argument defaults for convenience, or don't bottom of script 2. If needed, edit 'editcommand' function to defeat defenses 3. '-v' for...

PhoneSploit-Pro

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Getting started Installing dependencies Device setup...

CVE-2017-8570

来源：https://www.exploit-db.com/exploits/44263/ 使用方法：python packagercompositemoniker.py -s calc.sct -o example.rtf What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file...

Ducky-Exploit

Ducky-Exploit Introduction Ducky Exploit is python framework which helps as to code Digispark as Rubber Ducky This script has been tested on Kali Linux 18.2 Ubuntu 18.04 Windows Works with both Python2 and Python3 Keyboard Support Type US Type Keyboard Usage git clone...

root-sonim-xp3800

Root Sonim XP3800 Root access for the Sonim XP3800. Two methods are available — choose whichever fits your situation. Root Manager App The Root Manager app exploits CVE-2019-2215 a binder use-after-free kernel vulnerability to gain root directly on the device. No computer, no bootloader unlock, n...

ipwndfu

Open-source jailbreaking tool for many iOS devices Readdisclaimer before using this software. checkm8 permanent unpatchable bootrom exploit for hundreds of millions of iOS devices meant for researchers, this is not a jailbreak with Cydia yet allows dumping SecureROM, decrypting keybags for iOS...

Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

CVE-2023-2640-CVE-2023-32629

GameOverlay Ubuntu Privilege Escalation CVE-2023-2640 https://www.cvedetails.com/cve/CVE-2023-2640/ On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on t...

Router-Exploit-Shovel

Router Exploit Shovel Automated Application Generation for Stack Overflow Types on Wireless Routers Router exploits shovel is an automated application generation tool for stack overflow types on wireless routers. The tool implements the key functions of exploits, it can adapt to the length of the...

CVE-2022-27925-PoC

CVE-2022-27925-PoC Zimbra RCE simple poc...

cve-2023-29360

PoC for CVE-2023-29360 Exploit targeting MSKSSRV.SYS driver Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Thomas Imbert @masthoon from Synacktiv @Synacktiv...

CVE-2018-20062

CVE-2018-20062 thinkphp 5.0.23 Suitable for vulhub thinkphp vulnerability I'm a noob. I'll optimize it gradually later. Please don't criticize, experts...

CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 Local Privilege Elevation Vulnerability Research and Poc/Exploit Development Affected Systems and Application Versions Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...