CVE-2019-12840

CVE-2019-12840 Authenticated RCE in Webmin 1.910 - 'Package Updates' Usage : 1-setup a netcat listener. 2- python3 exploit.py Notes: Provide the url for example: http://:port Please copy 'sid' cookie from your browser and supply it for the exploit to work...

CVE-2024-28000

CVE-2024-28000 CVE-2024-28000 Exploit for litespeed-cache =6.3 allows Privilege Escalation with creation of administrator account Build git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . Disclaimer This PoC is for educational purposes only. Do not use this...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

CVE-2026-54121

CVE-2026-54121 Certighost This is a proof-of-concept tool to demonstrace CVE-2026-54121 a.k.a Certighost. Read here https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 for the detailed analysis. Install dependencies The proof of concept is a self-contained Python script. It requires...

securitylab

GitHub Security Lab Este es el repositorio git principal de GitHub Security Lab. Lo utilizamos para estos propósitos principales: Compartimos con nuestra comunidad algunas buenas prácticas sobre investigación de seguridad y divulgación de vulnerabilidades en nuestros docs Usamos issues en este...

CVE-2021-41773

Apache Path Traversal & RCE Exploit CVE-2021-41773 & CVE-2021-42013 These are critical path traversal vulnerabilities affecting Apache HTTP Server 2.4.49 and 2.4.50. They allow attackers to: Access files outside the web root LFI Achieve Remote Code Execution RCE if CGI is enabled Both...

CVE-2025-25257-Exploit-Tool

Herramienta de Explotación CVE-2025-25257 Créditos Based on watchTowr Labs, 0xbigshaq, and pwner.gg analyses. Advertencias For educational purposes only. Use on authorized systems. Modifies database/filesystem. Herramienta Python mejorada para detectar y explotar CVE-2025-25257 SQLi sin...

DirtyPipePython

dirty.py Descripción Este es un exploit para la vulnerabilidad del kernel de Linux CVE-2022-0847 DirtyPipe descubierta por Max Kellerman. Este código combina dos POC existentes de DirtyPipe en uno: febinrev Sobrescribe el binario sudo para obtener directamente una shell de root eremus-dev Una cop...

WeblogicScan

WeblogicScan Weblogic one-click vulnerability detection tool, V1.5 Software Author: TideRabbitMask Disclaimer: Pia!ｏ ‵-′ノ”ノ﹏。 This tool is for security testing only, please do not use it for illegal purposes, be good V 1.5 Feature Introduction: Provides one-click poc detection, covering almost al...

AudioCaptchaBypass-CVE-2008-2019

Exploit for CVE-2008-2019 - Simple Machines Form SMF 1.1.4 and below. SMF uses an audio captcha made up of a woman's voice saying each letter of the alphabet. The user, who could be blind needs to type in these letters in order to pass the challenge response. The vulnerability identified by...

cve-2026-32475-elementor-pro-lab

CVE-2026-32475 — Elementor Pro Forms unauthenticated arbitrary file upload → RCE A/B Docker lab that reproduces CVE-2026-32475 CVSS 9.x, Patchstack; Elementor Pro Forms File Upload field, affected ≤ 4.2.1, fixed 4.2.2 on 2026-08-19; reported by Tin Pham / TF1T. Unauthenticated, no user interactio...

log4j-rce-test

Build ./build.sh Start log4j RCE Server ./start-log4j-rce-server.sh Test Run java -cp log4j-rce-1.0-SNAPSHOT-all.jar log4j Check if you get logs in hack.log from current folder You can change this line String cmds = "sh", "-c", "echo 'Exploit at '" + getDateString + " ./hack.log" ; in file...

CVE-2018-16119

CVE-2018-16119: Ejecución Remota de Código Autenticada en TP-Link WR1043ND Resumen CVE-2018-16119 es una vulnerabilidad crítica de ejecución remota de código autenticada que afecta a los routers TP-Link TL-WR1043ND. Esta vulnerabilidad permite a atacantes autenticados ejecutar comandos arbitrario...

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

POC-CVE-2026-7873

Description PoC exploit code for CVE-2026-7873 Usage python3 poc.py -u -name -pwd -c...

CVE-2016-5195

CVE-2016-5195 mi POC y EXPLOIT personal de CVE-2016-5195 dirty COW Uso POC: escribir archivos de forma arbitraria Simplemente un POC de este CVE, compile el archivo poc.c de la siguiente manera: $ gcc poc.c -o poc -static -lpthread Debe ejecutarlo de la siguiente manera: ./poc destinationfile...

pentest-ai-agents

pentest-ai-agents 50 subagentes de Claude Code para pruebas de penetración. Inicio rápido | Hoja de referencia | Cobertura | Agentes | Ejemplos Tabla de contenidos Novedades en v3.3 Novedades en v3.2 Mapa de agentes Novedades en v3.1 Inicio rápido Hoja de referencia Cobertura Agentes Nivel 1 vs...

next-js-auth-bypass

Hola Mundo - Next.js 12.2 Una aplicación simple de prueba de concepto Next.js 12.2. 🚀 Inicio Rápido 1. Instalar Dependencias npm install 2. Ejecutar el Servidor de Desarrollo npm run dev La aplicación estará disponible en http://localhost:3000 🛠️ Scripts Disponibles npm run dev - Iniciar...

CVE-2018-17463

CVE-2018-17463 Exploit de Prueba de Concepto Funcionando para CVE-2018-17463 utilizando Páginas RWX de WebAssembly para la ejecución de Shellcode. CVE-2018-17463 se originó por la anotación incorrecta de efectos secundarios en V8 en Google Chrome anterior a la versión 70.0.3538.64, permitiendo a ...

C2-Pwn

C2-Pwn Uses Shodan API to pull down C2 servers to run known exploits on them. Requires shodan account for API. https://www.shodan.io/ Rat Exploit Support Dark Comet Remote File Download https://www.rapid7.com/db/modules/auxiliary/gather/darkcometfiledownloader Gh0st Rat buffer Overflow...