claude_opus_cve_2023_0266

Demonstration that Claude 3 Opus does not understand CVE-2023-0266 and does not find it Demo 1. Even if told where the bug is Opus does not find it, and hallucinates the presence of lock acquisitions Demo 2. "Prompt engineering" aka telling the LLM exactly how to find the bug also doesn't work De...

path-traversal-CVE-2026-14628

Path Traversal Demo - Case Study : CVE-2026-14628 A minimal, runnable demonstration fo the Path TraversalCWE-22 vulnerability class, usicng the recently dislosed CVE-2026-14628 as a real-world reference point. The real vulnerability CVE-2026-14628 affects 'NousResearch/hermes-agent' 2026.5.16. Th...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

SMBRat

SMBRat A Windows Remote Administration Tool in Visual Basic Script Idea Windows Environments like Active Directory Networks, get really bloated with SMB traffic. All hosts get Policies from the SYSVOL , configurations need remote files to work, desktop shortcuts tend to point to...

PoC-CVE-2021-41773

Explotación de Path Traversal en Apache HTTP Server CVE-2021-41773 Un exploit en Python para CVE-2021-41773, una vulnerabilidad de path traversal en Apache HTTP Server 2.4.49 que permite leer archivos arbitrarios del servidor. Detalles de la vulnerabilidad CVE-2021-41773 es una vulnerabilidad de...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

CVE-2021-41773

CVE-2021-41773 I have developed a POC of CVE-2021-41773 , RCE + cgi-bin path traversal NOTE : TESTED ON APACHE2 2.4.49 You can pulled vuln Apache2 2.4.49 directly from Docker $ sudo docker pull blueteamsteve/cve-2021-41773:no-cgid $ sudo docker run -dit -p 80:80 blueteamsteve/cve-2021-41773:no-cg...

CVE-2025-46822

CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path Description: While Path.resolve method is being used to protect against path traversal I have found that the usage of absolute path successfully read internal files , the endpoint is also not authenticated this means anyone can...

CVE-2022-23909

CVE-2022-23909 Description: On Windows, the Sherpa Connector Service version 2020.2.20328.2050 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. In case of a poorly...

CVE-2022-30333-PoC

CVE-2022-30333-POC Archivo de muestra para probar CVE-2022-30333 Sample.rar : si quieres probar en Linux. Al extraerlo, crea trav en ../../tmp/traversed. Asegúrate de que el directorio ../../tmp/traversed exista antes de extraer Sample.rar exp.rar : si quieres probar en el servidor de correo...

mass_cve-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 Screenshot Usage ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Note ! results will be automatically saved in vuln.txt u can add a common dir on...

CVE-2026-40022

camel-platform-http-main Authentication Bypass on Non-Root Context Paths CVE-2026-40022 This project demonstrates an authentication bypass in Apache Camel's camel-platform-http-main component the embedded HTTP / management server of the Camel main runtime, tracked as CVE-2026-40022. When...

CVE-2025-8088-Multi-Document

WinRAR Path Traversal Exploit CVE-2025-8088 - Multi-Depth Payload Deployment This Python script exploits a path traversal vulnerability CVE-2025-8088 in WinRAR to deploy payloads to the Windows startup folder using multiple relative path depths. The exploit creates a malicious RAR archive that,...

Grafana-CVE-2021-43798Exp

Grafana V8. Exp de lectura arbitraria de archivos--Script de verificación por lotes multihilo Descripción de la vulnerabilidad Grafana es un conjunto de herramientas de código abierto para análisis y visualización de métricas. A menudo se utiliza para la visualización de datos de series temporale...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

CVE-2021-41773

CVE-2021-41773 Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49...

CVE-2026-25057

CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

cloudfox

🦊 CloudFox 🦊 CloudFox te ayuda a obtener conciencia situacional en entornos de nube desconocidos. Es una herramienta de línea de comandos de código abierto creada para ayudar a testers de penetración y otros profesionales de seguridad ofensiva a encontrar rutas de ataque explotables en...

CVE-2021-41773_CVE-2021-42013

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE Exploit Author: Lucas Souza https://ls4ss.github.io/ Vendor Homepage: https://apache.org/ Version: 2.4.49, 2.4.50 Tested on: 2.4.49, 2.4.50 CVE : CVE-2021-41773, CVE-2021-42013 Credits: Ash Daulton and the cPanel Security Team Usage ./PoC.s...