CVE-2025-13597

AI Feeds = 1.0.11 - Unauthenticated Arbitrary File Upload The AI Feeds WordPress plugin versions 1.0.11 and below contain an unauthenticated remote code execution vulnerability in the actualizadorgit.php file. This file is directly accessible via HTTP without any authentication or authorization...

CVE-2023-40028

CVE-2023-40028 Exploit for CVE-2023-40028 for educational purposes Built for HTB machine LinkVortex Usage python3 exploit.py Then enter the file path you want to read e.g., /etc/passwd. Type exit to quit...

CVE-2020-1938_Ghostcat-PoC

CVE-2020-1938Ghostcat-PoC - CVE-2020-1938 A powerful Python exploit tool for Apache Tomcat AJP Ghostcat vulnerability CVE-2020-1938 with advanced features for penetration testing and security research. 🔍 Overview The Ghostcat vulnerability CVE-2020-1938 allows attackers to read arbitrary files fr...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

hashcatch

hashcatch Hashcatch deauthenticates clients connected to all nearby WiFi networks and tries to capture the handshakes. It can be used in any linux device including Raspberry Pi and Nethunter devices so that you can capture handshakes while walking your dog Written by @SivaneshAshok PoC of hashcat...

ShellSweep

ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...

analyzeMFT

AnalyzeMFT Status : All tests passing across Python 3.8-3.12 on Windows, macOS, and Linux. Quick Start Install pip install analyzeMFT Basic usage python analyzeMFT.py -f MFTFILE -o output.csv --csv Generate test MFT for testing python -c "from src.analyzeMFT.testgenerator import createtestmft;...

PortexAnalyzerGUI

PortexAnalyzerGUI Graphical interface for PortEx, a Portable Executable and Malware Analysis Library Download Releases page Features Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table, .NET Metadata PE Structures: Import Section, Resource Section,...

CVE-2025-24071-PoC

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Proof of Concept Overview CVE-2025-24071 is a spoofing vulnerability in Windows File Explorer that allows an unauthenticated attacker to expose sensitive information over a network. The vulnerability arises due to the implicit trust an...

CVE-2020-27603-bbb-libreoffice-poc

CVE-2020-27603-bbb-libreoffice-poc Proof of Concept of Libreoffice file exfiltration vulnerability in Big Blue Button These ODT files show how to exploit a file exfiltration vulnerability that can happen with server-side Libreoffice rendering, e.g. BigBlueButton. Background:...

CVE-2025-13380

AI Engine for WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Authenticated Contributor+ Arbitrary File Read The AI Engine for WordPress plugin contains a vulnerability in its image insertion feature that allows any authenticated user with post editing capabilities Contributor, Author, Editor...

UPnPHostFileRead

Description Local arbitrary file read PoC exploit for the Windows UPnP Device Host service. Reads an arbitrary file in the context of LOCAL SERVICE. Tested against Windows 11 Pro build 26200.8457. Reported to Microsoft. Assessed as "not a vulnerability". How to Build 1. Clone the repository. 2...

interactive-binary-structures

Interactive Binary Structures An interactive web-based toolkit designed to bridge the gap between theoretical documentation and practical analysis of binary formats and system memory layouts. Portable Executable PE Format Documentation This tool serves as an interactive visual map of a Windows PE...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

hitron-cfg-decrypter

Hitron CFG Decrypter Downloading git clone https://github.com/Manouchehri/hitron-cfg-decrypter cd hitron-cfg-decrypter/ Decrypting python decrypt.py -i sample.cfg.enc Encrypting python decrypt.py -i sample.cfg.dec -m encrypt Getting the CFG Thanks to Michael Henke @henkman for his previous work o...

SharpML

SharpML SharpML is a proof of concept file share data mining tool using Machine Learning in Python and C. The tool is discussed in more detail on our blog here, but is summarised below also: SharpML is C and Python based tool that performs a number of operations with a view to mining file shares,...

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...

http-server-node

http-server-node This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2021-23797 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSUR...

CVE-2025-4524

CVE-2025-4524 - Unauthenticated madara-core Wordpress theme LFI WordFence link Description A vulnerability lies in madara's madaraloadmore action, where a template parameter is arbitrary data from the user and passed to PHP's include function. Vulnerability A vulnerability lies in madara's...