awesome-pentest

Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...

log4py

log4py pythonic pure python RCE exploit for CVE-2021-44228 log4shell 1. run a vulnerable service like https://github.com/zzzz0317/log4j2-vulnerable-spring-app 2. change settings in exploit.py 3. pwn This is for educational use only mostly for my own lol This might only be useful after some...

CVE-2024-29296

CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...

CVE-2019-18634

CVE-2019-18634 This is a basic reproduction of CVE-2019-18634, a privilege escalation exploit in sudo with pwfeedback enabled. This was created as part of a project for NTU SC3010 to demonstrate a security vulnerability. To reproduce the exploit, a Docker image of Ubuntu 20.04 was used. A...

CVE-2007-2447-in-Python

CVE-2007-2447 - Python implementation Description Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 IP - Ip of the remote machine. PORT - Optional Port that smb is running on. PAYLOAD - Payload to be executed on the remote machine e.g. reverse shell. Examples: python3...

CVE-2026-82329-PoC-Exploit

CVE‑2026‑82329 – JFrog Artifactory Auth Bypass Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse A...

CVE-2025-99999

CVE-2025-99999 - HSM Firmware Authentication Bypass Description Critical authentication bypass in HSM Firmware v4.5.0 allowing key extraction. Affected Systems HSM Firmware v4.5.0 all builds Financial institutions using this HSM for SWIFT transaction signing IOCs IP| Port| Description ---|---|---...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory, the bait file i...

opennhp

OpenNHP: Open Source Zero Trust Security Toolkit OpenNHP is a lightweight, cryptography-powered, open-source toolkit implementing Zero Trust security for infrastructure, applications, and data. It is the reference implementation of the Cloud Security Alliance CSA Network-infrastructure Hiding...

CVE-2022-1388

CVE-2022-1388 A remote code execution vulnerability exists in the iControl REST API feature of F5's BIG-IP product. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands with root privileges. USAGE python3 f5bigipscanner.py...

CVE-2024-4040

CVE-2024-4040 Introduction Recently, I came across this vulnerability and found it quite interesting. I read the following articles and wrote a brief exploit. https://y4tacker.github.io/2023/12/10/year/2023/12/CrushFTP-Unauthenticated-Remote-Code-Execution-CVE-2023-43177/...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...

PoC-CVE-2017-0199

PoC-CVE-2017-0199 Exploit toolkit for vulnerability RCE Microsoft RTF. About this vulnerability: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...

StrutsShell

StrutsShell Apache Struts CVE-2017-5638 Shell Introduction The "LowNoiseHG LNHG Struts Shell " "StrutsShell " from now on was conceived in March 2017 after realizing the usefulness of not having to exploit Apache Struts CVE-2017-5638 manually HTTP GET requests by hand and after realizing the...

dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

Dirty-Pipe

Dirty Pipe Exploit CVE-2022-0847 Overview This repository contains a Proof of Concept PoC exploit for the Dirty Pipe vulnerability CVE-2022-0847 , which affects Linux kernel versions 5.8 to 5.16. This vulnerability allows local privilege escalation by exploiting improper handling of pipe buffers ...

CVE-2024-7313

Shield Security Plugin Vulnerability Exploit CVE-2024-7313 Overview This repository contains a Python PoC script designed to exploit a reflected XSS vulnerability in the Shield Security Plugin for WordPress, affecting versions below 20.0.6. The vulnerability CVE-2024-7313 allows an attacker to...

CVE-2021-21551-POC

DbUtilAx An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil23.sys’ Kernel Exploit. Read the full blog post here...

Spring0DayCoreExploit

Spring Core RCE - CVE-2022-22963 Following Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE The Circulating coding poc: The exploit has been uploaded asexp.py The official Spring patch is also in active production Patch Links in...