CVE-2017-8759

CVE-2017-8759 CVE-2017-8759 How to use? http://www.lz1y.cn/wordpress/?p=799 Modify cmd.hta file http://192.168.211.149:80 is your phishing domain port Also modify in exploit.txt https://example.com to your phishing domain port...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...

CVE-2026-16232

CVE-2026-16232 — Check Point SmartConsole Authentication Bypass An authentication bypass PoC from unauthenticated network access to full administrator privileges. Single file, pure Python 3 standard library, zero dependencies. Vulnerability Summary The Management Server Java login service...

CVE-2025-61183

CVE-2025-61183 Stored XSS in User Avatar Upload via Unsafe SVG Handling Overview A Stored Cross-Site Scripting XSS vulnerability was identified in the vaahcms, specifically within the interaction between the file upload logic in MediaController.php and the storeAvatar method in UserBase.php,...

xCrack Python Tools For Hackers

TG Download Link: https://t.me/+0z9FapS4mBgyZjhl xCrack Python Hacking Tool for Hackers And Spammers Requirements: Python 3.x Tested On: Python 3.10.4 ► cPanel Section ◄ Mass cPanel Active Checker Mass cPanel To Shell Uploader Mass cPanel To SMTP Cracker Mass cPanel To Webmail Cracker Mass cPanel...

htshells

HTSHELLS - Self contained web shells and other attacks via .htaccess files. Attacks are named in the following fashion, module.attack.htaccess and grouped by attack type in directories. Pick the one you need and copy it to a new file named .htaccess, check the file to see if it needs editing befo...

htshells

HTSHELLS - Web shells autocontenidos y otros ataques mediante archivos .htaccess. Los ataques se nombran de la siguiente manera: module.attack.htaccess y se agrupan por tipo de ataque en directorios. Elige el que necesites y cópialo a un archivo nuevo llamado .htaccess; revisa el archivo para ver...

CVE-2022-23935

CVE-2022-23935 The Exiftool software program, in versions prior to 12.38, has a security vulnerability that can be exploited through a specially crafted filename. This vulnerability allows for command injection, where an attacker can execute arbitrary commands on the system by appending a pipe...

ironcurtain

IronCurtain 一个用于自主AI代理的安全运行时，其安全策略源自人类可读的章程。 当有人写"安全"时，你应该立即持怀疑态度。我们所说的安全是什么意思？ !WARNING 研究原型。 IronCurtain 是一个早期研究项目，探索如何使AI代理足够安全以真正有用。API、配置格式和架构可能会发生变化。欢迎贡献和反馈。 演示 代理被要求克隆一个仓库并推送更改。gitclone 和 gitpush 都被策略引擎升级，但自动审批器自动批准了它们——用户来自命令模式的可信输入（Ctrl-A）提供了明确的意图，因此无需手动 /approve。 问题...

PoshC2

PoshC2 is a proxy aware C2 framework used to aid penetration testers with red teaming, post-exploitation and lateral movement. PoshC2 is primarily written in Python3 and follows a modular format to enable users to add their own modules and tools, allowing an extendible and flexible C2 framework...

ai-vuln-rediscovery-nginx-cve-2026-42945

AI-Assisted Rediscovery of CVE-2026-42945 in nginx This repository documents a reproducible AI-assisted vulnerability rediscovery experiment against nginx ngxhttprewritemodule, later associated with CVE-2026-42945. The experiment is intentionally narrow. The vulnerable file,...

CVE-2023-36664-Ghostscript-command-injection

Ghostscript command injection vulnerability PoC CVE-2023-36664 Vulnerability disclosed in Ghostscript prior to version 10.01.2 leads to code execution CVSS score 9.8. Official vulnerability description: Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices with the...

CVE-2020-1206

In the SMBGhost vulnerability CVE-2020-0796 I talked about a write-what-where primitive technique through the use of an integer overflow bug to change the pointer Alloc.Userbuffer to point to an address we desire and write arbitrary data into it. Similar to SMB Ghost, this vulnerability also exis...

CVE-2023-4226

🛠️ Exploitation CVE-2023-4226 for Chamilo LMS 📋 Description Python script that automates the exploitation of CVE-2023-4226 , an unrestricted file upload vulnerability in Chamilo LMS = v1.11.24. Uploads a PHP web shell based on PentesterMonkey and configures .htaccess to achieve a reverse shell...

snowpick

snowpick es un escáner de exposición de ServiceNow que detecta ACL de widgets mal configuradas, controles de acceso de la API REST y exposición de datos no autenticada. ServiceNow expone datos a través de dos superficies públicas comunes: los widgets de Service Portal y la API REST de tablas...

cpu_rec_rs

cpurecrs Determina qué arquitectura de CPU se utiliza en un archivo binario. Ejemplo: root@kitploit: $ cpurecrs /bin/bash /usr/lib/firmware/rtlwifi/rtl8821aefw Loading corpus from cpureccorpus/.corpus ---------------------------------------------------------------------------------------- File |...

CVE-2021-44967

CVE-2021-44967 - Authenticatedprivileged RCE Authenticated privileged remote command execution in LimeSurvey Version 5.2.4 via upload and install plugins allows a remote user to upload arbitrary PHP code file. Usage python3 exploit.py --url --user --password --lhost --lport A superadmin user is...

bashacks

bashacks 是什么？ bashacks 是一个 bash 函数集合，对程序员、安全分析师以及需要底层操作的普通用户都很有用。 实际上，bashacks 中并没有真正全新的东西；所有函数都是基于 UNIX 类系统中已有的软件编写的。但它让你能够用更简短的命令来完成通常需要多个命令才能完成的任务。 要求 bash = 4 bc binutils coreutils curl file grep hexdump html2text perl sed wget xxd zip 构建 使用 make 命令生成一个包含所有函数的单一文件，然后 source 它： root@kitploit:...

CVE-2019-19871-AuditGuide

Update 1-22-2020 There is now a tool from FireEye that will help scan these items below. The key to this is that you need to have enough logs to go back to 1-9-2020 to have a chance to see what was done beyond the exploit was ran. If it finds .XML payload files then you need to use the informatio...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...