bandwhich

bandwhich Esta es una utilidad CLI para mostrar la utilización actual de la red por proceso, conexión y IP/hostname remoto. Tabla de contenidos bandwhich Table of contents Project status How does it work? Installation Downstream packaging status Download a prebuilt binary Building from source...

gorilla

gorilla gorilla is the ultimate wordlist tool packing a lot of amazing utilities like: building wordlists based on patterns like crunch building wordlists based on common password/username formats like cupp scrap a web page and build a wordlist from its words like cewl extending existing wordlist...

CVE-2025-24893

CVE-2025-24893 PoC | XWiki Platform 15.10.10 - Remote Code Execution An RCE Remote Code Execution category vulnerability, found when unauthenticated attackers can execute arbitrary Groovy code remotely without authentication or prior access Guest User. Below is a PoC Proof-Of-Concept in Python fo...

patch_CVE-2023-22809

patchCVE-2023-22809 Bash Script: sudo Installation This Bash script automates the installation of the latest version of sudo on your system. Prerequisites Linux-based operating system wget package installed can be installed using the package manager Usage 1. Clone or download this repository to...

CVE-2023-46818

CVE-2023-46818 PoC This is a python implemntation of the PoC provided by Egidio Romano aka EgiX Over here, this exploit will prompt you a webshell, for a fully interactive shell execute a command and send yourself a reveseshell. Usage python exploit.py http://localhost username password Disclaime...

CVE-2024-2771-PoC

CVE-2024-2771-PoC CVE-2024-2771 Proof-of-Concept The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all...

CVE-2025-51820

CVE-2025-51820 A critical Remote Code Execution RCE vulnerability CVE-2025-51820 has been discovered in the Shopping Portal v1.0. 🚨 Remote Code Execution in Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Introduction In today’s digital world, Remote Code Execution RCE remains one of the mos...

CVE-2020-0688

CVE-2020-0688 CVE-2020-0688: Remote Code Execution on Microsoft Exchange Server Through Fixed Cryptographic Keys How to run ysonet.exe: download from here Run HTTP server: python3 -m http.server 8000 Change targeturl and your IP address in pwsh command. Install all python dependencies. Run python...

Project-Exploitation-of-Webmin-Authentication-Vulnerability

Research Objective: To conduct a comprehensive analysis and successful exploitation of a Remote Code Execution RCE vulnerability in Webmin version 1.890 CVE-2019-15107, ultimately gaining full control over the target system. Methodology: Initial Reconnaissance: Network scanning performed using...

CVE-2018-18912

🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Stack-Based Buffer Overflow SEH SEH-based buffer overflow in Easy File Sharing Web Server 7.2 demonstrating how an authenticated HTTP POST parameter can corrupt the exception handler chain. 📑 Table of Contents Why this repository exists Why thi...

CVE-2021-24917

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2021-24917 Run bellow command to check CVE-2021-24917 -h Configurations 2. We integrated with the Telegram API to receive...

Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework WinRAR Version Below 6.23 Overview This repository contains a small Windows desktop/console utility written in C .NET Framework 4.8 that demonstrates an archive-structure technique commonly discussed in security research contexts. About...

rConfig_rce

rConfig 3.9 Combined SQL Injection and Command Injection PoC Overview This PoC targets rConfig version 3.9.4 and demonstrates exploitation through a combination of SQL Injection and Remote Command Injection vulnerabilities. It automates the process of: 1. Extracting database name via SQLi 2...

CVE-2022-0543

CVE-2022-0543 Fully featured exploit for Redis RCE through Lua Sandbox Escape vulnerability. Based on https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. Features: Automatic reverse shell -I + -P Single command execution -x Basic shell Default ...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

CVE-2026-64561

CVE-2026-64561 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2018-7600

Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...

CVE-2018-7600-Remote-Code-Execution

Drupalgeddon2 Python Exploit CVE-2018-7600 This repository contains a Python-based proof-of-concept exploit for the critical remote code execution vulnerability in Drupal, known as Drupalgeddon2 CVE-2018-7600. This script is designed for educational purposes and for security professionals to use ...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address required -p,...

CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Vulnerability Report : Studio 3T Remote Command Execution Overview A critical vulnerability in Studio 3T version 2025.1.0 and earlier allows a remote attacker to execute arbitrary code via a crafted payload exploiting the childprocess module in the...