CVE-2022-44900-demo-lab

CVE-2022-44900 Demo lab Demo webapp vulnerable to CVE-2022-44900. CVE-2022-44900 is a directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier that allow attackers to read and write arbitrary files on the local machine via...

MIPS-CVE-2014-9222

Disclaimer Tutorials are for informational and educational purposes only. I believe that ethical hacking, information security and cyber security should be familiar subjects to anyone using digital information and computers. I believe that it is impossible to defend yourself from hackers without...

ff4j__ff4j_CVE-2022-44262_1-8-13

✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...

CVE-2026-75802

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...

CVE-2026-71378

ResourceIsolationRequestCycleListener protects a Wicket application against cross-site request forgery by rejecting requests that a resource isolation policy judges to come from another origin. Its default policy, FetchMetadataResourceIsolationPolicy, was derived from a reference implementation...

CVE-glibc

CVE-glibc CVE-2015-0235 glibc Get Host by Name Issue Copy and paste to get/check root@kitploit: wget https://github.com/alanmeyer/CVE-glibc/raw/master/get-GHOST.sh chmod +x get-GHOST.sh ./get-GHOST.sh References:...

Chimera

Chimera 是一个（炫酷且非常 hack-ish）的 PowerShell 混淆脚本，旨在绕过 AMSI 和防病毒解决方案。它能消化已知会触发防病毒软件的恶意 PS1 脚本，并通过字符串替换和变量拼接来规避常见的检测签名。 Chimera 是为这篇教程创建的，并且是进一步证明绕过检测签名是多么轻而易举的事。希望这个仓库能激励某人构建出更强大、更可靠的东西。 Chimera 的工作原理... 下面是 Nishang 的 Invoke-PowerShellTcp.ps1 的片段，位于 nishang/Shells。VirusTotal 报告该 PS1 脚本有 25 个检测。...

Chimera

Chimera is a shiny and very hack-ish PowerShell obfuscation script designed to bypass AMSI and antivirus solutions. It digests malicious PS1's known to trigger AV and uses string substitution and variable concatenation to evade common detection signatures. Chimera was created for this write-up an...

D-Link

D-Link CVE-2017-12943 Explanation of D-Link modem hack vulnerability The vulnerability recently published for accessing the modem without needing its password, the method is very simple and relies only on directories that are simply placed. In this episode, I will help you how to work with the...

loki-parse

loki-parse Un script de Python que puede detectar y analizar el tráfico de red relacionado con loki-bot malware entre un host comprometido y un servidor C2. Este script puede ser útil para analistas de DFIR e investigadores de seguridad que quieran saber qué datos se están exfiltrationando al C2,...

VindicateTool

Vindicate -brightgreen An LLMNR/NBNS/mDNS Spoofing Detection Toolkit for network administrators What is Vindicate? Vindicate is a tool which detects name service spoofing, often used by IT network attackers to steal credentials e.g. Windows Active Directory passwords from users. It's designed to...

Onionscan

onionscan deployment note! this repo is a patched version of https://github.com/s-rah/onionscan and is designed to be run from a google cloud shell from hunchly at https://github.com/hunchly/funchly/tree/main/onionscan which has been used as the baseline and modified to also be able to deploy on ...

SNMP-Brute

SNMP Brute SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options...

Apache-Struts-Shodan-Exploit

POC DE EXPLOTACIÓN DE APACHE STRUTS SHODAN Autor: @037 El código original se puede encontrar aquí. Esta herramienta aprovecha CVE-2018-11776 y Shodan para realizar explotación masiva de servidores Apache Struts verificados y vulnerables. El parámetro de búsqueda de Shodan se ha omitido para...

CVE-2026-59243

CVE-2026-59243 — Apache Airflow FAB Auth Manager JWT signature bypass Korean: README.ko.md Apache advisory: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl published 2026-07-29 CVE record: https://vulners.com/cve/CVE-2026-59243 Fixed in: apache-airflow-providers-fab==3.7.3 Class:...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 A Fortinet FortiOS Authentication Bypass Proof of Concept See our blog post for technical details Detection in Action root@kitploit: python CVE-2024-55591-PoC.py --host 192.168.1.5 --port 443 --command "get system status" --user watchTowr --ssl / | | |\ \ \ / / \ \ / | | \| | / ...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

RegPwn

🛠️ RegPwn - Windows Local Exploit Tool RegPwn is a tool designed to demonstrate a local privilege escalation LPE exploit on Windows systems. It works on Windows 10, Windows 11, and Windows Server versions. This guide will help you download, prepare, and run RegPwn on your Windows computer safely...

CVE-2018-6574-go-get-RCE

This repository does not have a README...

CVE-2017-17562

CVE-2017-17562 RCE GoAhead web server 2.5 3.6.5 Standalone Python 3 reverse shell exploit for CVE-2017-17562, works on GoAhead web server versions 2.5 3.6.5. Blog article here. Written and tested on Python 3.7 based on POC and vulnerable environment here. Some code borrowed from the Metasploit...