CVE-2022-1015

CVE-2022-1015 A write-up and Local Privilege Escalation Proof-of-Concept of an OOB read and write vulnerability in the Linux Kernel. You can find the write-up of this vulnerability on my blog and you can find my introduction to nftables here as well. An Important note The exploit provided in this...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

CVE-2022-36804-PoC-Exploit

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with this exploit. Note: this exploit includes automatic repo detection which ...

NotEnough

Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string...

mole

Mole A framework for identifying and exploiting out-of-band OOB vulnerabilities. Installation & Setup Mole Install Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in...

cve-2023-21987-poc

cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerability This Proof of Concept PoC is designed for a Linux guest OS running on a Windows host OS. The purpose of this PoC is to demonstrate the ability to leak addresses of VirtualBox components. You may need to adjust the pointer values with...

CVE-2022-42889

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

CVE-2024-23692

CVE-2024-23692 Usage: go run hfs.go -h go run hfs.go -u http://127.0.0.1 go run hfs.go -u http://127.0.0.1 -dns // default uses ceye.io requires configuration go run hfs.go -u http://127.0.0.1 -dns -d abc.cn // specify dnslog go run hfs.go -u http://127.0.0.1 -cmd // enter command line Tips: DNSL...

CVE-2021-29447-Authenticated-XXE-WordPress-5.6-5.7

CVE-2021-29447 Authenticated XXE Exploit for WordPress 🎯 A Python PoC to exploit the authenticated XXE vulnerability CVE-2021-29447 in WordPress versions 5.6–5.7 via WAV metadata. It abuses the iXML chunk in WAV files to trigger an Out-of-Band OOB exfiltration of sensitive data—like /etc/passwd,...

interactsh

Un serveur de collecte d'interactions OOB et une bibliothèque client Fonctionnalités • Utilisation • Client Interactsh • Serveur Interactsh • Intégration Interactsh • Rejoindre Discord Interactsh est un outil open-source pour détecter les interactions hors bande. C'est un outil conçu pour détecte...

interactsh-web

Interactsh Web Client Веб-интерфейс на Next.js для Interactsh Начало работы Предварительные требования Node.js 20+ требуется для React 19 npm, yarn или pnpm Установка 1. Клонируйте репозиторий: git clone https://github.com/projectdiscovery/interactsh-web.git cd interactsh-web 2. Установите...

CVE-2021-30632

From: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 The analysis of this bug can be found here. This is a Chrome bug that is reported by an anonymous researcher and was believed to be exploited in the wild. The exploit here is tested on v8 version...

femida

Femida-xss WIP Un plugin automatisé de recherche de blind-xss pour Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - find and select blind-xss.py Comment utiliser Paramètres Tout d'abord, vous devez configurer votre URL de rappel dans le champ...

femida

Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field called "Your url" and press Enter ...

weightBufs

WeightBufs: WeightBufs — это эксплойт чтения/записи в ядре для всех устройств Apple с поддержкой Neural Engine. Ошибки и эксплойт авторства @simo36; подробнее об уязвимостях и методах эксплуатации можно узнать из моих слайдов презентации на POC. Эксплойт не полагается на какие-либо прописанные...

joro

Joro Un framework d'exploitation web pour les professionnels de la sécurité offensive. Proxy d'interception, détection de vulnérabilités aveugles, génération de web shells, intégration C2 et outils de collaboration dans un seul binaire avec une interface web intégrée. Avertissement : Cet outil es...

Sitecore Experience Manager (XM)/Experience Platform (XP) 10.4 - Insecure Deserialization

Sitecore Experience Manager XM and Experience Platform XP 10.4 before KB1002844 allow remote code execution through insecure deserialization. id: CVE-2025-27218 info: name: Sitecore Experience Manager XM/Experience Platform XP 10.4 - Insecure Deserialization author: iamnoooob,rootxharsh,pdresearc...

xcat

XCat XCat est un outil en ligne de commande pour exploiter et investiguer les vulnérabilités d'injection XPath aveugle. Pour une référence complète, lisez la documentation ici : https://xcat.readthedocs.io/en/latest/ Il prend en charge un grand nombre de fonctionnalités : Sélection automatique de...

SUSE SLES15 Security Update : kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4415-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4415-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: -...