CVE-2020-5398

CVE-2020-5398 - Ataque RFD Reflected File Download para Spring MVC No Spring Framework, versões 5.2.x anteriores a 5.2.3, versões 5.1.x anteriores a 5.1.13 e versões 5.0.x anteriores a 5.0.16, um aplicativo está vulnerável a um ataque de download de arquivo refletido RFD quando define um cabeçalh...

dirtypipe

HAFTUNGSAUSSCHLUSS Dieser Code dient ausschließlich zu Bildungs- und Forschungszwecken. Verwenden Sie ihn nicht auf Systemen, die Ihnen nicht gehören oder für die Sie keine Testberechtigung haben. Der Autor ist nicht verantwortlich für Missbrauch, Schäden oder rechtliche Konsequenzen, die aus der...

overread

overread Simulates CVE-2023-4966 Citrix Bleed overread bug This is my final project for Harvard CS50 Cybersecurity 2023. It's about a bug. A small bug – with huge, ongoing consequences. In this presentation, I’ll be sharing the “bleeding insights” from one developer’s tiny mistake. A mistake that...

dirtyclone-CVE-2026-43503

CVE-2026-43503 — DirtyClone Linux local privilege escalation. A cloned skbuff loses the SKBFLSHAREDFRAG flag, so ESP in-place decryption writes into file-backed page-cache memory. The PoC patches /etc/passwd in cache to inject a uid-0 account and gives a root shell. Disk is never modified. Fixed ...

IIS-Raid

IIS-Raid IS Raid is a native IIS module that abuses the extendibility of IIS to backdoor the web server and carry out custom actions defined by an attacker. Documentation When installed, IIS-Raid will process every request and method, check if the X-Password header exists and compare it against t...

CVE-2023-23397

CVE-2023-23397 CVE-2023-23397 C PoC 1- download the msgkit 2- edit the appointment class and add the below: 3- create a new class inside the project to set the proprieties of the msg file: root@kitploit: using MsgKit.Enums; using System; using System.Collections.Generic; using System.Linq; using...

CVE-2024-35333

CVE-2024-35333 A stack buffer overflow vulnerability exists in the charset handling functionality of html2xhtml version 1.3. An attacker can exploit this vulnerability by providing a specially crafted input, which would lead to the overflow of the 'buf' variable located on the stack. Successful...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

BurpSuite_403Bypasser

403Bypasser 一个用于绕过 403 受限目录的 BurpSuite 扩展。通过被动扫描（默认启用），每个 403 请求都会被该扩展自动 扫描，只需将其添加到 BurpSuite 中即可享受。 Payloads（测试载荷）： $1：主机名 $2：路径 root@kitploit: $1/$2 $1/%2e/$2 $1/$2/. $1//$2// $1/./$2/./ $1/$2anything -H "X-Original-URL: /$2" $1/$2 -H "X-Custom-IP-Authorization: 127.0.0.1" $1 -H "X-Rewrite-URL:...

hidden

Hidden 🇺🇦 Hidden ha sido desarrollado como una solución para tareas de ingeniería inversa e investigación. Es un controlador de Windows con una interfaz de modo de usuario que se utiliza para ocultar entornos específicos en su máquina Windows, como programas RCE instalados ej. procmon, wireshark,...

cve-2016-1764

Código de Exploit PoC para CVE-2016-1764 Recuperación de datos de iMessage en texto plano sin romper la criptografía Autores Shubham Shah de Bishop Fox Joe DeMesy de Bishop Fox Matthew Bryant CVE-2016-1764 Proveedor: Apple Fecha de publicación: 8 de abril de 2016 Fecha del parche: 21 de marzo de...

cve-2014-0521

CVE-2014-0521 Adobe Reader vulnerability This JavaScript based Adobe Reader vulnerability affects all versions of Adobe Reader on all platforms prior to version 11.0.07 released on May 13, 2014. The bug was found by Gábor Molnár and was reported on March 10, 2014. Advisories: CVE-2014-0521 Adobe...

CVE-2017-1000486

CVE-2017-1000486 Explotación de prueba de concepto para la inyección EL de PrimeFaces 5.x CVE-2017-1000486, una vulnerabilidad RCE que puede usarse para obtener ejecución remota de código en un objetivo. Descripción de la vulnerabilidad Puede encontrar una excelente descripción de la vulnerabilid...

CVE-2023-7028

CVE-2023-7028: CVE-2023-7028 Exploitation Tool Description: This Python script automates the exploitation of a hypothetical security vulnerability CVE-2023-7028 on GitLab instances. It facilitates password reset attacks on specified target email addresses, demonstrating a potential security risk...

CVE-2023-33977

CVE-2023-33977 Stored XSS Via SVG Upload in kiwitcms/kiwi - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the kiwitcms/kiwi application, which was assigned the CVE-2023-33977 identifier. The vulnerability allows for the execution of malicious...

log4j-spring-vuln-poc

log4j Spring vulnerable POC This is a POC for a simple spring boot start backend with maven including vulnerable log4j version for CVE-2021-44228 Spring boot bootstrapped with https://start.spring.io. commands ./mvnw spring-boot:run: start server ./mvnw dependency:tree: print dependency tree and...

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Nexus Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Nexus. 🔍 Key Findings Exposed Credentials in Gitea Commit History - Medium Severity Krayin CRM Unrestricted File Upload CVE-2026-38526 - High Severity...

PRET

PRET - Kit de Explotación de Impresoras ¿Tu impresora es segura? Verifícalo antes de que alguien más lo haga... PRET es una nueva herramienta para pruebas de seguridad de impresoras desarrollada en el marco de una Tesis de Maestría en la Universidad del Ruhr en Bochum. Se conecta a un dispositivo...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

CVE-2023-4966-POC

CVE-2023-4966-POC Proof Of Concept for NetScaler CVE-2023-4966 Vulnerability Description This Python script exploits CVE-2023-4966, a critical vulnerability in Citrix ADC instances that allows unauthenticated attackers to leak session tokens. The vulnerability is assigned a CVSS score of 9.4 and ...