CVE-2021-44228_PoC

POC for CVE-2021-44228 This python script was created while I was working on the TryHackMe room for Log4j. While this was created with default variables for this room, I used argparse to make the script versatile for a GET request. All necessary varaibles can be changed with different options, se...

CVE-2024-48990_needrestart

CVE-2024-48990 - Needrestart 3.7-3 Privilege Escalation Exploit Overview This repository contains an exploit for CVE-2024-48990, a privilege escalation vulnerability in Needrestart 3.7-3. The exploit leverages improper input handling to execute arbitrary code with elevated privileges. Affected...

CVE-2020-13151

CVE-2020-13151 POC Aerospike Database 5.1.0.3 Host Command Execution Full writeup @ https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html poc.lua shows manual exploitation of the server cve2020-13151.py for automated exploitation run-poc.sh sets up a docker...

CVE-2024-40094

CVE-2024-40094 ENF ExecutableNormalizedFields Denial of Service Exploit This script exploits the CVE-2024-40094 vulnerability in graphql-java by triggering an ExecutableNormalizedFields ENF based denial of service. It builds a crafted GraphQL introspection query with deep nested aliases, designed...

cve-2022-33891

cve-2022-33891 Usage: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py -u...

CVE-2025-29927-Proof-of-Concept

Walkthrough Step 1 5 min Hint Which network services are exposed by the target? — — — Solution kali@kali:$ nmap kali@kali:$ nmap -sC -sV -p Step 2 5 min Hint 1 The landing page only reveals a login page, but web servers often expose additional paths. Hint 2 Try using a directory brute-forcing too...

kin

A new foundation for code. Kin is a graph-native code repository for people and AI agents. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository. Functions, types, and th...

CVE-2024-38063-scanner

Overview This project is a Python script designed to identify and exploit vulnerable Windows systems using Shodan for reconnaissance and Scapy for crafting and sending malicious IPv6 packets targeting CVE-2024-38063. The tool automates the process of searching for vulnerable hosts, verifying thei...

Spring4Shell-POC

Spring4Shell PoC Application This is a dockerized application that is vulnerable to the Spring4Shell vulnerability CVE-2022-22965. Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat...

CVE-2016-0051

Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. vulnerabilty poc auhor: koczkatamas https://twitter.com/koczkatamas Original code: https://github.com/koczkatamas/CVE-2016-0051 Thanks to koczkatamas this PoC will run from CMD and th...

wpgarlic

wpgarlic Un fuzzer de plugins de WordPress como prueba de concepto que llevó al descubrimiento de más de 300 vulnerabilidades en plugins de WordPress instalados en casi 30 millones de sitios. La técnica utilizada se describe en https://kazet.cc/2022/02/03/fuzzing-wordpress-plugins.html Si deseas...

pocs

pocs publicaremos pocs en este repositorio todos los bugs en este repositorio se divulgan de forma responsable...

CVE-2025-55182-React2Shell

React2Shell React2Shell is a proof-of-concept PoC exploit demonstrating a CRITICAL remote code execution RCE vulnerability in modern web frameworks using React Server Components RSC. This PoC targets CVE-2025-55182 , a CVSS 10.0 vulnerability that allows unauthenticated remote attackers to execut...

SilentMoonwalk

SilentMoonwalk PoC Implementation of a fully dynamic call stack spoofer TL;DR SilentMoonwalk is a PoC implementation of a fully dynamic call stack spoofer, implementing a technique to remove the original caller from the call stack, using ROP to desynchronize unwinding from control flow. Authors...

CVE-2018-12533

RF-14310 / CVE-2018-12533 payload generator Based on Lucifaer research All credit goes to https://github.com/Lucifaer References https://access.redhat.com/security/cve/cve-2018-12533 richfaces-jboss-poc Easy to deploy proof of concept to practice Richfaces 3.3.4 deserialization + EL injection...

CVE-2024-21762

CVE-2024-21762 out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability Exploit poc by assetnote ssldohandshakeptr = b"%60%ce%42%00%00%00%00%00" getcwdptr = b"%70%62%2c%04%00%00%00%00" pivot1 = b"%52%f7%fd%00%00%00%00%00" push rdi; pop rsp; ret; pivot2 = b"%ac%c9%ab%02%00%00%00%00" ad...

CVE-2020-1967

CVE-2020-1967 Proof of concept exploit about OpenSSL signaturealgorithmscert DoS flaw CVE-2020-1967. Credit for the original finding to Bernd Edlinger, additional analysis by Matt Caswell and Benjamin Kaduk, this demo by Imre Rad. Prerequisite Server or client applications that call the...

CVE-2022-31814

pfBlockerNG = 2.1.426 Unauth RCE This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, uploads a shell, executes a command, and then deletes the shell. Requirements This script requires Python 3.x...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

POC_Metabase_CVE-2023-38646

Solo con fines educativos Inspirado en la investigación de Assetnote CVE: CVE-2023-38646 CVSS: 9.8 Enlace del proveedor: clic Versión vulnerable Metabase Enterprise 1.46 Solo probado en ParrotOS Resultado...