938109 matches found
Invoke-DumpMDEConfig
DumpMDEConfig PowerShell Script Overview Invoke-DumpMDEConfig is a PowerShell script designed to extract and display Microsoft Defender configuration and logs, including excluded paths, enabled ASR rules, allowed threats, protection history, and Exploit Guard protection history. The script provid...
CVE-2018-19276
CVE-2018-19276 OpenMRS Insecure Object Deserialization RCE From https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607 Insecure object deserialization allows Arbitrary Code Execution without needing to log in. IP restrictions on Webservices module do not prevent thi...
CVE-2021-3156
CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samedit Root Exploit No BruteForce All research credit: Qualys Research Team Check out the details on their blog. Manually installed Ubuntu 20.04 LTS and Sudo version 1.8.31 on Docker container for testing purpose and running the command...
UltraViolet
UltraViolet Self-hosted network discovery & search ā your own Shodan, on your hardware. TCP/UDP scanning Ā· 100 protocol probes Ā· TLS/JARM fingerprints Ā· CVE matching Ā· full-text search Ā· delta tracking Ā· alerts Quick start Ā· Features Ā· Architecture Ā· Documentation Ā· Production Important. Scan onl...
EDRaser
EDRaser Usage Guide EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs...
CVE-2021-3129
CVE-2021-3129 PoC for CVE-2021-3129 Laravel For educational purposes only Test Set up the PoC environment $ docker-compose build $ docker-compose up -d Confirm it works See http://localhost:8000/ and make sure the Laravel default page is shown. Exploit $ docker-compose exec attacker sh / python3...
CVE-2019-19576
class.upload.php = 2.0.3 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.3 Tested on newly installed Ubuntu 19.10 with PHP7.3 and Apache/2.4.38 Specifically Debian/Ubuntu has been found to be vulnerable since they add the php,...
CVE-2026-41089-Netlogon-RCE
šØ CVE-2026-41089: Critical Windows Netlogon RCE Unauthenticated Remote Code Execution on Active Directory Domain Controllers š§ Conceptual Overview I am publishing this technical breakdown of CVE-2026-41089 , an exceptionally critical vulnerability residing deep within the Windows Netlogon service...
initroot
initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass CVE-2016-10277 By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device. For example, on cedric some...
ntlm_theft
ntlmtheft A tool for generating multiple types of NTLMv2 hash theft files. ntlmtheft is an Open Source Python3 Tool that generates 21 different types of hash theft documents. These can be used for phishing when either the target allows smb traffic outside their network, or if you are already insi...
XAMPPv3.3.0-BOF
XAMPPv3.3.0-BOF Proof-of-Concept exploit code for XAMPP v3.3.0 ā '.ini' Buffer Overflow Unicode + SEH Steps to Reproduce: 1. Run the python script "poc.py", it will create a new file "xampp-control.ini" 2. Open the application xampp-control.exe 3. Click on the "admin" button in front of any servi...
sharingIsCaring
sharingIsCaring TwonkyMedia Server Pwnd CVE-2018-7171 Background information This is a GitHub repository keeping all relevant information about CVE-2018-7171. and more CVE-2018-7171 represents a directory/file traversal vulnerability in TwonkyMedia Server version 7.0.11-8.5 latest version...
CVE-2024-42327
PoC for CVE-2024-42327 / ZBX-25623 A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the...
suricata-vedas
VEDAS-Driven Autonomous Generation + Community Contributions of Suricata & Nuclei Rules for CVEs This repository is an open, collaborative validation space for CVE detection content: Suricata rules : network detection of exploitation attempts. Nuclei templates : active, non-destructive checks for...
CVE-2021-31955-POC
CVE-2021-31955 Windows Kernel Information Disclosure POC The exploit works on all 64-bit vulnerable targets. unpatched system patched system...
Penetration-Testing-Assessment-23-04-2026
Penetration Testing Report ā IIS WebDAV Exploitation Overview This project demonstrates a complete penetration testing lifecycle performed on a vulnerable target system. The assessment follows a structured approach including reconnaissance, scanning, enumeration, exploitation, and...
CVE-2021-43798-grafana_fileread
CVE-2021-43798-grafanafileread If the target is behind a reverse proxy, replace the payload with this one: url1 = url +"/public/plugins/"+str.rstripplugins+"//../..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f/etc/passwd" Grafana is a cross-platform, open-source data visualization web application...
CVE-2020-9484_Exploit
CVE-2020-9484Exploit Exploit for Apache Tomcat deserialization CVE-2020-9484 which could lead to RCE Affected versions: Apache Tomcat 10.x exploit.sh exploit.sh your IP your port target IP target port...
CVE-2021-3129
Remote Code Execution: Laravel CVE-2021-3129 š Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...
CVE-2022-0492-Checker
CVE-2022-0492-Checker A script to check if a container environment is vulnerable to container escapes via CVE-2022-0492 About the vulnerability On Feb. 4 , Linux announced CVE-2022-0492 , a new privilege escalation vulnerability in the kernel. CVE-2022-0492 marks a logical bug in control groups...