CVE-2021-2394

CVE-2021-2394 POC of CVE-2021-2394 Disclaimer This project is for learning purposes only. Any direct or indirect consequences and losses caused by unauthorized testing shall be borne by the user. Notes The POC sends packets using IIOP. Please add relevant dependencies dependencies for version...

Invoke-CVE-2022-22965-SafeCheck

Invoke-CVE-2022-22965-SafeCheck PowerShell port of CVE-2022-22965 by colincowie's original python version. Install: iexiwr https://raw.githubusercontent.com/daniel0x00/Invoke-CVE-2022-22965-SafeCheck/main/Invoke-CVE202222965-SafeCheck.ps1 -UseBasicParsing.content Usage: Injects file...

cve-2017-2824-reverse-shell

This repository does not have a README...

CVE-2023-38831-POC

Description Name : CVE-2023-38831 CVSS Score : 7.8 Affected Versions : Winrar 6.23 CVE-2023-38831 is a zero-day vulnerability affecting WinRAR all versions prior to 6.23. The issue is in the processing of ZIP format which could allow attackers to utilize affected archives to distribute malware. B...

network-security-lab

🔬 Network Security Lab A controlled virtual environment simulating real-world attack and defense scenarios 📋 Overview This lab simulates a real-world penetration test and defensive hardening exercise in a fully isolated virtual environment. It demonstrates the full offensive security lifecycle —...

CVE-2026-68820-Mitigation-PoC-

CVE-2026-68820: Windows WinSock afd.sys UAF - Mitigation & Detection PoC 📌 Descripción General Este repositorio contiene una demostración educativa de la mitigación para CVE-2026-68820 , una vulnerabilidad crítica de tipo Use-After-Free UAF en el driver afd.sys de Windows. Contexto de la...

CVE-2026-0257

CVE-2026-0257 PAN-OS GlobalProtect Authentication Bypass Vulnerability ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone...

CVE-2026-102491 mahonelau kykms SqlInjectionUtil QueryGenerator.java QueryGenerator.doMultiFieldsOrder sql injection

A vulnerability was identified in mahonelau kykms up to 8f130c2d85842d5b44caae78cc46d65e505949f7. The impacted element is the function QueryGenerator.doMultiFieldsOrder of the file QueryGenerator.java of the component SqlInjectionUtil. The manipulation of the argument column leads to sql injectio...

follina-msdt-threat-investigation

Follina — CVE-2022-30190 Threat Analysis Microsoft MSDT Remote Code Execution zero-day — active exploitation investigation by MUHAMMAD ZAWAR KHATTAK 🔗 View Full Writeup → 🧪 Scenario On a Friday evening, the team was alerted with a new RCE vulnerability actively being exploited in the wild. I was...

CVE-2025-24813

CVE-2025-24813 Exploit Toolkit This is an advanced and automated exploitation tool for CVE-2025-24813 , targeting Apache Tomcat servers vulnerable to insecure session deserialization. 🔍 Features Multi-target scanning from file or single URL --targets / --url Automatic gadget chain testing...

sudo_exploit

This repository does not have a README...

lab-annie

🔐 Lab Annie — TryHackMe CTF Write-Up 📋 Project Overview This TryHackMe lab, titled "Annie" , is a hands-on cybersecurity CTF Capture The Flag challenge that focuses on remote-access vulnerabilities and privilege escalation. Detail| Info ---|--- 🎯 Platform| TryHackMe 🏫 Program| Cyber Sec Cyber Sec...

CVE-2015-1578

CVE-2015-1578 Achat 0.150 beta7 - Remote Buffer Overflow Rewrite for python3 for the PNPT course. Original: Author KAhara MAnhara Rewritten: in python3 by Giuseppe Aloisi Achat 0.150 beta7 - Buffer Overflow Tested on Windows 7 32bit https://www.exploit-db.com/exploits/36025 give the script a few...

activemq-ids-ips-lab

IDS/IPS Lab - Protecting Apache ActiveMQ from RCE Attacks This project evaluates how IDS and IPS mechanisms can detect and prevent exploitation of Apache ActiveMQ vulnerability CVE-2023-46604 in a controlled lab environment. Project Overview The lab was designed with separated attacker, gateway,...

CVE-2023-46604

CVE-2023-46604 By Ruben Fobe & Klaas Stessens Intro WARNING This project is intended for educational and lab purposes only. Only use these techniques in environments you own or are authorized to test. This lab will simulate the exploitation of CVE-2023-46604, by using a Kali Linux VM attacker and...

ownCloud_RCE_CVE-2013-0303

This repository does not have a README...

CVE-2021-34527-1675

CVE-2021-34527-1675 Cve-2021-1675 or cve-2021-34527? Detailed analysis and exploitation of windows print spooler 0day vulnerability！！！...

CVE-2023-21837

CVE-2023-21837 POC,EXP, chatGPT for me code import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost, targetport send exploi...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descripción CVE-2022-42475 es una vulnerabilidad de heap-based buffer overflow en el servicio SSL VPN de FortiOS que permite a atacantes no autenticados ejecutar código arbitrario de forma remota RCE mediante solicitudes...

log4j-CVE-2021-44228-test

log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...