dontgo403

dontgo403 is a tool to bypass 40X errors. Installation Grab the latest release for your OS from RELEASES Outdated atm Or compile by your own RECOMMENDED: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build Customization If you want to edit or add new bypasses, you can...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

BadExclusionsNWBO

BadExclusions Now With Better Opsec BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR. How it works? BadExclusionsNWBO copies and runs HookChecker.exe in all folders and subfolders of a given path. You need to have HookChecker.exe ...

Moodle - Cross-Site Scripting/Remote Code Execution

The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system. Moodle versions 4.1.x before 4.1.3 and 4.2.x before...

Chuanhu Chat - Directory Traversal

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...

Windmill < 1.603.3 - Operator Authorization Bypass

Windmill versions 1.276.0 through 1.603.2 contain an authorization bypass vulnerability in the folder management API endpoints. The endpoints for creating, deleting, and managing folder ownership do not enforce role-based access control for operator-level users. In Windmill, operators are...

orb

Orb — Zero-Trust Folder Tunneling Tool Orb is a secure, terminal-first utility that allows you to share a local folder across the internet using end-to-end encryption. No accounts, no cloud storage, no port forwarding required. Demo Sharing a Folder Share a folder with a single command - encrypte...

CVE-2026-66492

Path Traversal in File Upload Destination PhocaCommander ≤ 6.1.3 — Authenticated Admin Writes Files Outside Webroot SUMMARY The file upload handler in PhocaCommander constructs the destination path from an attacker-controlled base64-encoded folder parameter without any path containment validation...

CVE-2017-7494

CVE-2017-7494 hello i,am Gihad from Libya 17 C information On Exploit ========================================================================================== This module triggers an arbitrary shared library load vulnerability in Samba versions 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. This module...

CVE-2020-1283_Windows-Denial-of-Service-Vulnerability

CVE-2020-8103 Exploit The write up can be found in the blog of the RedyOps Labs: https://labs.redyops.com/index.php/2020/04/27/dos-via-arbitrary-folder-creation/ Third Party Tools This exploit code, is heavily based on symboliclink-testing-tools which was Developed by James Forshaw. The...

CVE-2023-38831

CVE-2023-38831 PoC Proof Of Concept This is an easy to use exploit for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. An exploitable vulnerability has been identified in RARLabs WinRAR versions prior to 6.23. This vulnerability enables attackers to execute arbitrary cod...

cve-2018-11714_POC

cve-2018-11714POC An issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action. artigo pt-br:...

CVE-2023-3009

CVE-2023-3009 Stored XSS on item name - Bypassing CVE-2023-2516 in TeamPass 3.0.9 - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the nilsteampassnet/teampass application, which was assigned the CVE-2023-2516 identifier. The vulnerability can be...

CVE-2025-48799

Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...

enum_shares

enumshares Shared folders enumeration tool EnumShares enumerates shared folders across the network and under a custom user account. It can check if the shared folder is writable for the current user. It can save you a lot of time when you need to discover directories allowing "write" to everyone ...

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...

Powershell-Tools

PSUnzipper - PowerShell Unzipper Uses SharpZipLiB in .NET, loaded in runtime no file on disk - ref. https://github.com/icsharpcode/SharpZipLib Can be used with password zip, unzip Both encryption methods AES and ZipCrypto is supported. When zipping/unzipping - no file in temp is created - all...

CVE-2021-4034

CVE-2021-4034 Exploit of the vulnerability CVE-2021-4034 Steps prior to execution: Add a . after the = in the GNCOV... folder...

CVE-2025-63420

CVE-2025-63420 CrushFTP11 before 11.3.757 is vulnerable to stored HTML injection in the CrushFTP Admin Panel Reports / "Who Created Folder", enabling persistent HTML execution in admin sessions. CWE CWE-79 — Improper Neutralization of Input During Web Page Generation Cross-site Scripting CVSS v3....