CVE-2025-64513

CVE-2025-64513 – Milvus Proxy Authentication Bypass Vulnerability PoC 📘 Overview This repository contains a proof-of-concept PoC script to verify the existence of CVE-2025-64513 , a critical authentication bypass vulnerability in Milvus Proxy that may allow unauthorized access to internal APIs...

403Kangaroo

403Kangaroo !! This tool is still under development if you have any issues please don't hesitate to contact me via linkedin or smth 403/401 bypass tool via certain headers and values headers.txt,values.txt. When you load the extension for the first time it will open a headers.txt file and write t...

forbidden

Forbidden Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client. Tested on Kali Linux v2024.2 64-bit. Made for educational purposes. I hope it will help! Future plans: Add the silent option to suppress console output. Add the no color option...

CVE-2022-22963

CVE-2022-22963 CVE-2022-22963 PoC Slight modified for English translation and detection of https://github.com/chaosec2021/Spring-cloud-function-SpEL-RCE/blob/main/SpelRCEPOC.py . By default whoami is executed on the target and a file vulnerable.txt is created with the URLs that are vulnerable...

EXP-CVE-2017-75

EXP-CVE-2017-75 This Python script is designed to check for and exploit a specific vulnerability in NGINX servers referred to as CVE-2017-75. This was developed for a public vulnerability disclosure program, I recently submitted a report to. It uses a crafted Range header to potentially trigger a...

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...

CVE-2021-27404

Authenticated Host Header Injection - Askey Internet Fiber Modem Vendor: Askey Software Version: BRSVg11.11RTFTEF001V6.54V014 Model: RTF8115VW Vulnerable Header: Host Not tested in other model/version. Impact: An attacker could take advantege on that vulnerability to redirect user to a fake Login...

WEBFANG

WEBFANG v2.0 Disclaimer: Webfang is a CLI developed and engineered as a Reconnaissance toolkit for ethical hackers, blue teamers, and red teamers. It performs passive and active reconnaissance using spidering, Subdomain Scanning, WHOIS, DNS, Shodan, and header fingerprinting. WEBFANG is intended...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS Authentication bypass Mass exploitation /api/v2/cmdb/system/admin/ "ssh-public-key1": "" ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded: for="127.0.0.1...

CVE-2023-45857-Demo

Demo to verify the behavior of axios vulnerability CVE-2023-45857 1. Start with dev container 2. Run npm run dev on the app container 3. Access http://app.localhost 4. Verify that XSRF-TOKEN is set in the Cookie using the browser's developer tools The value is CREDENTIALTOKEN HttpOnly is false...

exploit-CVE-2025-29927

Exploit for CVE-2025-29927 Next.js - Authorization Bypass Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description Next.js is a React framework for building full-stack web application...

CVE-2025-23167

CVE-2025-23167 – Node.js HTTP Request Smuggling Exploit Working exploit for CVE-2025-23167, a request smuggling vulnerability affecting Node.js 20.x versions prior to v20.19.2. This bug allows improper HTTP header termination, enabling attackers to bypass proxy-based access controls. Files...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Example:...

BurpSuite_403Bypasser

403Bypasser An burpsuite extension to bypass 403 restricted directory. By using PassiveScan default enabled, each 403 request will be automatically scanned by this extension, so just add to burpsuite and enjoy. Payloads: $1: HOSTNAME $2: PATH $1/$2 $1/%2e/$2 $1/$2/. $1//$2// $1/./$2/./...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

Obfusk8

Obfusk8: C++17-Based Obfuscation Library Obfusk8 is a lightweight, header-only C++17 library designed to significantly enhance the obfuscation of your applications, making reverse engineering a substantially more challenging endeavor. It achieves this through a diverse set of compile-time and...

CVE-2022-1388

CVE-2022-1388 POC for CVE-2022-1388 affecting multiple F5 products. Follow the Horizon3.ai Attack Team on Twitter for the latest security research: Horizon3 Attack Team James Horseman Zach Hanley Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

CVE-2025-29927-Nextjs-Bypass-PoC

PoC: CVE-2025-29927 - Next.js Middleware Bypass This repository contains a Proof of Concept PoC demonstrating how to bypass middleware security checks in Next.js v13.5.6 by exploiting a vulnerability related to internal HTTP headers. Vulnerability Overview: CVE-2025-29927 What is it? CVE-2025-299...

nextjs-cve-2025-29927-poc

Next.js POC for CVE-2025-29927 Authorization Bypass in Next.js Middleware · CVE-2025-29927 · GitHub Advisory Database Next.js and the corrupt middleware: the authorizing artifact - zherowebsecurity- What is this? This vulnerability allow to bypass middleware logics. src/middleware.ts: // always...