zip-shotgun

ZIP Shotgun ZIP 파일 업로드 기능및 압축 파일 추출의 취약성일명 Zip Slip을 테스트하기 위한 유틸리티 스크립트입니다. 이 스크립트에 대한 아이디어는 Silent Signal Techblog - 압축 파일 업로드 및 명령 실행 게시물과 OWASP - 악성 파일 업로드 테스트에서 영감을 받았습니다. Snyk.io는 이 취약점이 어떻게 동작하는지에 대한 보고서Zip Slip 취약점와 다양한 언어로 작성된 취약한 라이브러리를 포함한 GitHub 저장소Snyk.io Zip Slip GitHub 저장소를 제공하고 있습니...

CVE-2024-48914

This post is a research article published by EQSTLab. Thanks toRajesh Sharma, who discovered this vulnerability. CVE-2024-48914 ★ CVE-2024-48914 Arbitrary File Read and DoS PoC ★ Description CVE-2024-48914 : vendure-ecommerce Arbitrary file read and DoS Vulnerability description: Vendure is an...

cve-2022-31813

CVE-2022-31813 Vulnerability Checker Author : Derek Odiorne GitHub : @dodiorne Version : 1.2 Last Updated : May 21, 2025 MITRE ATT &CK Technique: T1190 – Exploit Public-Facing Application 🧠 Description This tool is a black-box vulnerability scanner for detecting CVE-2022-31813 , a path traversal...

Xibo-CMS-Zip-Slip-RCE-Exploit-CVE-2023-33177

Xibo CMS Zip Slip RCE Exploit CVE-2023-33177 This exploit demonstrates a path traversal vulnerability in Xibo CMS CVE-2023-33177 that allows remote code execution through malicious layout imports. Vulnerability Details CVE/Advisory: CVE-2023-33177 Affected Versions: Xibo CMS 1.8.0 - 2.3.16 Xibo C...

Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Ruby On Rails Path Traversal Vulnerability（CVE-2018-3760） 中文版本Chinese version Ruby On Rails is a well-known Ruby Web development framework, which uses Sprockets as a static file server in development environment. Sprockets is a Ruby library that compiles and distributes static resource files. The...

dotdotslash

dotdotslash 디렉토리 트래버설 취약점을 검색하는 데 도움이 되는 도구 벤치마크 도구 효율성을 검증하기 위해 테스트한 플랫폼: DVWA low/medium/high bWAPP low/medium/high Screenshots 설치 이 저장소를 복제하여 최신 버전을 다운로드할 수 있습니다. git clone https://github.com/jcesarstef/dotdotslash/ 이 도구는 Python3와 함께 작동하도록 만들어졌습니다. 사용법 python3 dotdotslash.py --help usage:...

CVE-2024-21626

소개 재현 단계 커널이 5.4,4.19,.. 이상이고 /proc/kallsyms에 openat2가 있는지 확인하세요. v1.0.0-rc93= runc =1.1.11 $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t pfxdosysopenat2 ffffffffa666dea0 t dosysopenat2 ffffffffa666e020 t pfxdosysopenat2...

CVE-2024-4956-Bulk-Scanner

README.md CVE-2024-4956 Bulk Scanner Disclaimer This tool is intended only for educational purposes and for testing in corporate environments. https://twitter.com/nav1n0x/ and https://github.com/ifconfig-me take no responsibility for the misuse of this code. Use it at your own risk. Do not attack...

exploit-apache2-cve-2021-41773

Exploit for Apache2 Exploit for path transversal vulnerability in apache. Version: 2.4.49 CVE: CVE-2021-41773 Pull docker image docker pull httpd:2.4.49-alpine Configure apache In /usr/local/apache2/conf/httpd.conf replace these entries AllowOverride none - Require all denied + Require all denied...

CVE-2023-1177-PoC-reproduce

MLflow CVE-2023-1177 - PoC & Reproduce This repository contains Proof-of-Concept PoC exploit code and instructions to reproduce the Local File Inclusion LFI vulnerability in MLflow, identified as CVE-2023-1177. Vulnerability Information: CVE ID: CVE-2023-1177 Vulnerability Type: Local File...

http-vuln-cve2019-14322.nse

http-vuln-cve2019-14322.nse Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names such as C: in Windows pathnames Description CVE-2019-14322 - A vulnerability was found in Pallets Werkzeug up to 0.15.4. It has been declared as...

CVE-2018-20250-WinRAR-ACE

CVE-2018-20250-WinRAR-ACE Proof of concept code in C to exploit the WinRAR ACE file extraction path CVE-2018-20250. Resources https://research.checkpoint.com/extracting-code-execution-from-winrar/ https://github.com/droe/acefile https://apidoc.roe.ch/acefile/latest/ Dependencies InvertedTomato.Cr...

SimplesApachePathTraversal

SimplesApachePathTraversal Simples Apache Path Traversal It's a simple tool for test vulnerability Apache Path Traversal https://blog.mrcl0wn.com/2021/10/uma-simples-tool-para-apache-path.html Autor: MrCl0wn Blog: https://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter:...

cve-2023-34035-mitigations

This repo is a set of samples to demonstrate the arrangements wherein applications may be vulnerable to https://spring.io/security/cve-2023-34035CVE-2023-34035. An application is vulnerable when all of the following are true: Spring MVC is on the classpath DispatcherServlet and at least one other...

CVE-2006-2842

Badges License MIT Installation Install cve-2006-2842 with npm npm install cve-2006-2842 -g Usage Example for single url cve-2006-2842 -u http://example.com Usage Example for list of urls cve-2006-2842 -l urls.txt -o out.txt Screenshots Help menu Get all items 👋 Hey karthithehacker...

cve-2025-59532-poc

CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...

CVE-2007-4559

demonstration of CVE-2007-4559 what is this? This is a demonstration of how python's default handling of tar file extraction prior to python v3.11.4 is vulnerable to a simple symlink attack. The instructions below describe how to craft a malicious payload. The script untar.py demonstrates how and...

CVE-2025-49132

CVE-2025-49132 Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute...

CVE-2024-30851-jasmin-ransomware-path-traversal-poc

Jasmin ransomware web panel path traversal PoC EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware I discovered a pre-auth path traversal vulnerability in the Jasmin Ransomware web panel CVE-2024-30851, allowing an attacker to deanonymize panel operators and dump decryption keys...

CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE

CVE-2021-41773 – Apache HTTP 서버 2.4.49 원격 코드 실행 ⚠️ 면책 조항 이 저장소는 오직 교육 및 연구 목적으로만 사용됩니다. 여기에 제공된 정보와 코드는 제어된 환경예: 개인 실습 머신에서만 사용할 수 있습니다. 소유한 시스템이나 명시적 허가 없이 테스트하는 시스템에 이 코드를 무단으로 사용하는 것은 불법이며 비윤리적입니다. 저자는 오용이나 발생한 손해에 대해 책임지지 않습니다. 🔍 취약점 개요 CVE-2021-41773 은 Apache HTTP 서버 버전 2.4.49 에 영향을 미칩니다. 경로...