CVE-2019-5736-PoC

Usage PoC was created to the scenario were victim is executing for example docker exec sh. Before running exploit it's required to overwrite sh binary in the container file system: printf '!/proc/self/exe' /bin/sh After that, when victim executes exec command, runc binary in the host file system...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing An authentication module within Blackboard Learn is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation. A CAS service ticket is intended for only a specific service , but Blackboard Learn do...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

ReverseTCPShell

ReverseTCP Shell Framework | \ | / | \ / | | | | | | | | | | | | | | | | | | | || | | | | | // \ \ / / \ '/ |/ \ | | | | / \ | |/ \ | | | | \ \ /\ V / / | \ \ / | | || | | | | | / | | || \| / || |/|| || |/|| ||||| - By: @ZHacker13 - | Modules | - Show C2-Server Modules. - | Info | - Show...

ScannerCVE-2021-3156

ScannerCVE-2021-3156 Script to scan a list of hosts to check if they are vulnerable to CVE-2021-3156. If not vulnerable, the output is as follows: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper sudoedit: a...

CVE-2025-26056

CVE-2025-26056 Auhtor: Rohan Deshpande OS Command Injection Summary OS command injection is a security vulnerability that allows an attacker to execute arbitrary commands on a host operating system via a vulnerable application. This can lead to unauthorized access, data breaches, and system...

pfBlockerNg-CVE-2022-40624

pfBlockerNg-CVE-2022-40624 Background pfBlockerNG is the Next Generation of pfBlocker with the following features: 1. Manage IPv4/v6 List Sources into 'Deny, Permit or Match' formats. 2. GeoIP database by MaxMind Inc. GeoLite2 Free version. 3. De-Duplication, Suppression, and Reputation...

CVE-2024-3094

CVE-2024-3094 Basic POC to test CVE-2024-3094 vulnerability inside K8s cluster ❗ DISCLAIMER ❗ USE ONLY FOR EDUCATIONAL PURPOSES THE AUTHOR IS NOT RESPONSIBLE FOR ANY DAMAGE CAUSED BY THE USE OF THIS SOFTWARE Description We will deploy a vulnerable pod and exploit it to execute commands inside tha...

AWS-SAM-CLI-Vulnerabilities

AWS SAM CLI Vulnerabilities CVE-2025-3047 & CVE-2025-3048 This README provides a detailed analysis of two security vulnerabilities found in the AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 and CVE-2025-3048 – along with the code-level issues and fixes. Both vulnerabilities...

CVE-2025-29279

CVE-2025-29279 To exploit this vulnerability, the attacker must insert the payload example.com;echo 'testing' into the "Host Address" in Traceroute6 Diagnostics in the Diagnostics section...

ps5-pihost

PS5 Pi Host Use Raspberry Pi OS Lite 64-bit, Bookworm or newer with NetworkManager. A 64 GB SD card has ample room. This runs the existing Python host; do not flash the ESP32 binary to the Pi or its SD card. What this does The Pi creates a Wi-Fi network for the PS5. Its DHCP server assigns the...

aftermath

À propos Aftermath est un framework de réponse aux incidents open source basé sur Swift. Aftermath peut être utilisé par les défenseurs afin de collecter, puis d'analyser les données provenant de l'hôte compromis. Aftermath peut être déployé depuis un MDM idéalement, mais il peut aussi s'exécuter...

VHostScan

VHostScan A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 slidedeck. This is an enhanced version of the original VHostScan byCodingo with additional improvements, modernized...

cloudfrunt

CloudFrunt CloudFrunt is a tool for identifying misconfigured CloudFront domains. Background CloudFront is a Content Delivery Network CDN provided by Amazon Web Services AWS. CloudFront users create "distributions" that serve content from specific sources an S3 bucket, for example. Each CloudFron...

uc_httpd_exploit

uc httpd exploit lighthttpd Simple uc httpd exploit made with py3.. this exploit was written from CVE-2014-2324 Description Multiple directory traversal vulnerabilities in 1 modevhost and 2 modsimplevhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a .. dot dot in...

CVE-2022-22972

CVE-2022-22972 POC for CVE-2022-22972 affecting VMware Workspace ONE, vIDM, and vRealize Automation 7.6. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

arp-scan

arp-scan О проекте arp-scan — это инструмент сетевого сканирования, который использует протокол ARP для обнаружения и идентификации fingerprinting IPv4-хостов в локальной сети. Он доступен для Linux, BSD, macOS и Solaris под лицензией GPLv3. Это README.md для arp-scan версии 1.10.1-git. Установка...

POC-CVE-2019-5736

RunC-CVE-2019-5736 Video : https://bit.ly/2WqvILb Blog Post : www.idealhax.blogspot.com/2020/05/breaking-out-of-docker-via-runc.html Here, I like to mention that the original developer of this exploit is Yuval Avrahami at Twistlock Labs. Running the POCs Note that running the POCs will overwrite...

the-bastion

🔒 The Bastion Présentation Les bastions sont un groupe de machines utilisées comme point d'entrée unique par les équipes opérationnelles administrateurs systèmes, développeurs, administrateurs de bases de données, ... pour se connecter de manière sécurisée à des périphériques serveurs, machines...