cve-2025-59287

CVE-2025-59287 - WSUS Exploitation Toolkit by adel-h4x0a ⚠️ For Educational and Authorized Testing Purposes Only ⚠️ Overview This toolkit demonstrates the exploitation of CVE-2025-59287, a remote code execution vulnerability in Windows Server Update Services WSUS. Components 1. Encryption Module...

Bashark

Bashark 2.0 Post exploitation toolkit Bashark aids pentesters and security researchers during the post-exploitation phase of security audit. Usage To launch this tool on compromised host, simply source the bashark.sh script from terminal: $ source bashark.sh Then type help to see the help menu...

CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Cisco iOS SNMP Overflow Exploit Toolkit CVE-2017-6736 CVE-2018-0296? I have recently submodded CVE-2018-0296, which can be used in junction with this original exploit, can be used to do reconnaissance and see what is contained in the appliance beforehand...

Furtex

Furtex Linux向けポストエクスプロイトおよび回避研究ツールキット。iouringとeBPFをベースに構築。liburingやフレームワークは使わず、生のシステムコールのみを使用。 まもなくさらにツールを追加予定。PR歓迎。🇧🇷 Rootkit Researchersに参加 https://discord.gg/66N5ZQppU7 許可された研究およびレッドチームエンゲージメントに限ります。所有していないシステムで実行しないでください。 Furtex/ ├── iouring/ raw iouring ops: file, net, injection, exfil 13...

pown

Pown Pown.js — это набор инструментов для тестирования безопасности и эксплуатации, построенный на основе Node.js и NPM. В отличие от традиционных средств безопасности, в частности Metasploits, Pown.js считает фреймворки антипаттерном. Поэтому каждая функция в Pown является самостоятельным модуле...

p0wnedShell

p0wnedShell PowerShell Runspace Post Exploitation Toolkit Author: Cn33liz and Skons Version: 2.6 License: BSD 3-Clause What is it: p0wnedShell is an offensive PowerShell host application written in C that does not rely on powershell.exe but runs powershell commands and functions within a powershe...

SenselessViolence

SenselessViolence CVE-2022-31814 pfSense pfBlockerNG = 2.1.426 Exploitation Toolkit. What? This is an exploitation toolkit for the pfSense pfBlockerNG = 2.1.426 plugins remote command injection feature discovered by IHTeam. I wrote this to play around with some of the design principles found in t...

Deep-Reaver

Deep Reaver Deep Reaver is a powerful, AI-enhanced vulnerability assessment and exploitation toolkit built in Python. Inspired by tools like Nmap and Nessus, Deep Reaver is designed for deep, modular scanning of web applications and services. Features AI-assisted analysis via aiassistant.py Modul...

CVE-2024-27348

🔥 CVE-2024-27348 Exploitation Toolkit 🎓 Academic Project 📚 Course: FC411 - Secure Network Design 👨‍🏫 Instructor: Dr. Maira Sultan 🏫 University: University of Prince Mugrin 📅 Year: 2025 ⚡ A complete toolkit for exploiting CVE-2024-27348 Apache Huge-Graph-Server developed as part of the FC411 course...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

CVE-2025-55182 Exploitation Tool A comprehensive security research tool for testing Next.js React Server Components Remote Code Execution vulnerability CVE-2025-55182. Overview This toolkit provides automated detection and exploitation capabilities for CVE-2025-55182, a critical RCE vulnerability...

PoC-CVE-2017-0199

PoC-CVE-2017-0199 Microsoft RTF의 RCE 취약점을 위한 익스플로잇 툴킷. 이 취약점에 대해: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...

exploit-toolkit

Target Exploitation Toolkit — GitHub Actions Structure...

New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials

Cybersecurity researchers have disclosed details of a new Linux backdoor named PamDOORa that's being advertised on the Rehub Russian cybercrime forum for $1,600 by a threat actor called "darkworm." The backdoor is designed as a Pluggable Authentication Module PAM-based post-exploitation toolkit...

Exploit for CVE-2024-11114

Chromium Exploit Development Toolkit A toolkit for weaponizing...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE Exploitation Arsenal Professional penetration testing too...

Exploit for CVE-2026-22812

CVE-2026-22812 CVE-20...

Acacium-PostEx-Toolkit

Acacium Automated Post-Exploitation & Lateral Movement Toolkit...

Pega Platform 8.1.0 - Remote Code Execution Vulnerability

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat Enterprise 7 CVE : CVE-2022-24082...

Pega Platform 8.1.0 - Remote Code Execution (RCE)

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Google Dork: N/A Date: 20 Oct 2022 Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat...

Pega Platform 8.7.3 Remote Code Execution Vulnerability

Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code execution vulnerability. If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to uplo...