PELoader

PELoader PELoader implementa varias técnicas de inyección de shellcode y utiliza la librería libpeconv para cargar archivos PE cifrados en lugar de inyectar shellcode en un hilo remoto. Se implementaron las siguientes técnicas: Module Stomping LoadLibrary Module Stomping NtMapViewOfSection PoC...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string...

CVE-2020-5902

CVE-2020-5902 Script de Python para explotar F5 Big-IP CVE-2020-5902 Ejemplos Explotación de lectura de archivo local: python3 CVE-2020-5902.py -t example.com -x lfr -f /etc/passwd Explotación RCE: python3 CVE-2020-5902.py -t example.com -x rce -a list+auth+user+admin...

Wormy

Wormy - El desafío En este repositorio escribiré algunas funciones en Python3 en mi tiempo libre para agregar "algunas características de propagación como gusanos" a cualquier backdoor en Python. Después de terminar, lo convertiré en un gusano real Lista de tareas pendientes: 1Propagación en...

CVE-2019-12735

CVE-2019-12735 An Arbitrary Code Execution vulnerability through modeline in vim/neovim Product: Vim 8.1.1365, Neovim 0.3.6 Type: Arbitrary Code Execution CVE: CVE-2019-12735 Date: 2019-06-04 Author: Arminius @rawsec Vim versions before 8.1.1365 and Neovim versions before 0.3.6 have a vulnerabili...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Remote Code Execution Vulnerability RCE Reproduction Environment This repository provides a container-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal and allows for arbitrary code...

CVE-2020-12112

CVE-2020-12112 🚨 BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. Story 📜 During a distance learning course on a BigBlueButton instance a student in my class shared my teacher's slide presentation link and I noticed that the file name was includ...

PutScanner

🔍 PUT Directory Scanner A penetration testing tool that identifies writable web directories via HTTP PUT method, specifically designed to detect CVE-2025-24813 Arbitrary File Upload in Apache Tomcat. 📌 Features Smart Protocol Handling : Auto-detects HTTPS/HTTP with fallback Comprehensive Checks :...

cve-2019-5736-poc

Para ejecutar: 1. editar el comando poc en stage2.c 2. construir docker docker build -t cve . 3. ejecutar docker docker run -d cve /bin/bash -c "tail -f /dev/null" 4. hacer copia de seguridad de docker-runc cp /usr/bin/docker-runc /usr/bin/docker-runc.bak 5. docker exec -it docker-id /bin/bash 6...

CVE-2022-3910

CVE-2022-3910 poc dirtyfile dirtymm...

CVE-2020-11651

CVE-2020-11651 PoC para CVE-2020-11651 Requiere Python3 probado en 3.8 python3.8 -m pip install pyzmq msgpack ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server Target Server IP or Host optiona...

prefetch-hash-cracker

Cracker de Hash de Prefetch Motivación Durante el análisis forense de una máquina Windows, es posible que encuentres el nombre de un archivo prefetch eliminado. Aunque su contenido puede no ser recuperable, el nombre del archivo en sí suele ser suficiente para encontrar la ruta completa del...

ADSyncDump-BOF

ADSyncDump BOF The ADSyncDump BOF is a port of Dirkjan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File BOF for use with Cobalt Strike, Sliver and Havoc. !NOTE The tool has been tested on a Windows Server 2019 with Azure AD Connect version 2.2.1.0. The 32 bit version of the BO...

CheckPlz

CheckPlz CheckPlz is an Rust adaptation of the populars ThreatCheck & GoCheck tools, designed to scan files for potential threats while leveraging AMSI Antimalware Scan Interface and Windows Defender. By isolating malicious content with precision and providing comprehensive analysis, CheckPlz...

CVE-2021-33558

CVE-2021-33558 Reference: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 Payload: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

CVE-2019-19576

class.upload.php = 2.0.3 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.3 Tested on newly installed Ubuntu 19.10 with PHP7.3 and Apache/2.4.38 Specifically Debian/Ubuntu has been found to be vulnerable since they add the php,...

cve-2021-40444

cve-2021-40444 Ingeniería inversa de los archivos maliciosos "A Letter Before Court 4.docx" que explotan cve-2021-40444 Los archivos incluyendo el documento de Word malicioso y el archivo .cab pueden descargarse en any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ ¡Nota! El...

VEN0m-Ransomware

VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc Este proyecto demuestra cómo un controlador legítimo y firmado puede ser armado para evadir defensas e implementar ransomware simulando un ciberataque real. 🚨 Probado en Windows 11 Pro 24H2...

CVE-2023-33253

CVE-2023-33253 LabCollector 6.0 though 6.15 allows remote code execution An authenticated remote low-privileged user can upload an executable PHP file and execute system commands. The vulnerability is in the message function, and is due to insufficient validation of the file such as...