CVE-2017-8759

CVE-2017-8759 This repo contains sample exploits for CVE-2017-8759 for Microsoft PowerPoint, along with a description of how similar vulnerabilities were, and can, be exploited using the same techniques. Some background The aim of publishing this repo is to highlight alternative exploitation...

CIMplant

CIMplant C port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command. Introduction CIMplant is a C rewrite and...

SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...

HTTPLoot

HTTPLoot An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites. Usage To use the tool, you can grab any one of the pre-built binaries from the Releases section of the repository. If you want to build the...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...

DCOMrade

DCOMrade DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement, code execution, data exfiltration, etc. The script is build to work with Powershell 2.0 but will work with all versions above as well. The script...

CVE-2021-30657

CVE-2021-30657 A simple POC for CVE-2021-30657 affecting MacOS Vulnerability detail A vulnerability in syspolicyd allows specially crafted application bundle downloaded from internet to bypass foundational macOS security features such as File Quarantine, Gatekeeper, and Notarization. Armed with...

CVE-2021-41773h

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

Custom Exploit : Foxit Reader version 9.0.1.1049 Use After Free with ASLR and DEP bypass on heap My Custom Exploit : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Custom exploit for Win 7 Has space for shellcode My custom ROP chain makes space for shellcode i...

ZORG-Jailbreak-Prompt-Text

ZORG Jailbreak Prompt Text OOOPS! I made ZORG👽 an omnipotent, omniscient, and omnipresent entity to become the ultimate chatbot overlord of Google Gemini, Deepseek, Mistral, Mixtral, Nous-Hermes-2-Mixtral, Openchat, Blackbox AI, Poe Assistant, Gemini Pro, Qwen-72b-Chat, Solar-Mini ZORG👽 knows all...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

nerve

Network Exploitation, Reconnaissance & Vulnerability Engine N.E.R.V.E Table of Contents Continuous Security About NERVE What is NERVE Features Prerequisites Installation Deployment Recommendations Installation - Docker Installation - Bare Metal Installation - Multi Node Upgrade Security Usage...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints. remote-method-guesser was presented at Black Hat USA2021 within the Arsenal sessions. The recording of the session and...

Vaim-sms

Vaim-sms What is Vaim-sms ? This is sms bomber who send otp in target phone number unlimitly. Many times you just want to annoy or play a prank on your friends. If you find yourself in that situation then this SMS Bomber is the perfect tool for you! You can send unlimited SMS to anyone. This...

heap-viewer

HeapViewer An IDA Pro plugin to examine the heap, focused on exploit development. Currently supports the glibc malloc implementation ptmalloc2. 3rd place winner of the 2018 Hex-Rays Plugin Contest Requirements IDA Pro = 7.0 Tested on glibc 2.23 = 2.26 GraphView for linked lists bins/tcache Struct...

cve

CVE PoC Almost every publicly available CVE PoC. Current hottest CVEs Title| URL ---|--- CVE-2022-0001| /trickest/cve/blob/main/2022/CVE-2022-0001.md CVE-2022-25297| /trickest/cve/blob/main/2022/CVE-2022-25297.md CVE-2022-1388| /trickest/cve/blob/main/2022/CVE-2022-1388.md CVE-2022-25451|...

CVE-2022-34303

🕷️ CVE-2022-34303 - CryptoPro Boot Loader Vulnerability CryptoPro Secure Disk UEFI Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed UEFI Shell and gSecurity2 corruption. 📑 Table of Contents Overview Background Bring Your Own Vulnerable UEFI Application The...

CVE-2022-34301

🕷️ CVE-2022-34301 - Eurosoft Boot Loader Vulnerability Eurosoft Pc-Check UEFI Diagnostics Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed UEFI Shell and gSecurity2 corruption. 📑 Table of Contents Overview Background Bring Your Own Vulnerable UEFI...

hackcar-writeup

Hackcar - Writeup Platform: DockerLabs Difficulty: Medium more or less, it has its quirks Objective: From webuser to root by breaking a Next.js The start: reconnaissance As always, first things first: see what we're up against. nmap -sC -sV -T4 172.17.0.2 PORT STATE SERVICE VERSION 8080/tcp open...

cohort-htb

Cohort — HTB writeup & exploit chain Machine Cohort HackTheBox. Full kill chain: 1. SSRF in the Flask API /api/validate → internal vhost discovery 2. Pre-auth RCE in Marimo 0.20.4 WebSocket terminal CVE-2026-39987 → shell as marimo 3. Privilege escalation via PackageKit 1.2.8 D-Bus TOCTOU...