CVE-2025-48384

PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...

Beleth

Beleth Dictionary based SSH cracker Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -P password Use single password attempt -t target Attempt connections to thi...

CVE-2024-26169-Detail-1

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. $python hwacha.py &&&& && && &&...

NyxInvoke

NyxInvoke NyxInvoke is a versatile Rust-based tool designed for executing .NET assemblies, PowerShell commands/scripts, Beacon Object Files BOFs and PE files with built-in Ntdll Unhooking, patchless AMSI and ETW bypass capabilities. It can be compiled as either a standalone executable or a DLL...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION The Trojanizer tool uses WinRAR SFX to compress the two files input by...

CVE-2024-25897

parameters ip, port, path exploit output Help panel exploit explanation Here is the explanation of the code in Markdown: Code Explanation This script is designed to exploit a specific vulnerability in Jenkins CVE-2024-23897. It allows downloading a JAR file from a Jenkins server and executing a...

CVE-2017-11882-metasploit

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

pyrdp

PyRDP PyRDP es una herramienta y librería de protocolo de escritorio remoto RDP Monster-in-the-Middle MITM en Python. Cuenta con varias herramientas: RDP Monster-in-the-Middle Registra credenciales en texto plano o hashes NetNTLM usados al conectar Roba datos copiados al portapapeles Guarda una...

reverse-shell

reverse-shell Reverse Shell como servicio - https://reverse-shell.sh Reverse shell fácil de recordar que debería funcionar en la mayoría de sistemas tipo Unix. Detecta el software disponible en el objetivo y ejecuta un payload apropiado. Uso 1. Escucha la conexión En tu máquina, abre un puerto y...

CVE-2025-8088

CVE-2025-8088 – WinRAR Exploit This repository contains a malicious RAR file generator that abuses the CVE-2025-8088 vulnerability in WinRAR, allowing a seemingly legitimate file to execute a payload when the victim extracts it. Recommended command python3 exploit7.12.py \ -p payload.exe \ -o...

CVE-2017-9779

Automatic execution Payload From Windows By Path Users :: What is ? Cmder Cmder is a software package created out of pure frustration over the absence of nice console emulators on Windows. It is based on amazing software, and spiced up with the Monokai color scheme and a custom prompt layout,...

CVE-2022-1388

CVE-2022-1388 PoC for CVE-2022-1388 affecting F5 BIG-IP. Usage $ ./poc.sh --help Usage: poc.sh --help --file FILE --scan --exploit --payload PAYLOAD CVE-2022-1388 PoC script. One or multiple IPs can be scanned. Arguments: --help Show this help message and exit. --file FILE File list containing on...

drow

drow Beschreibung TL;DR drow ist ein Kommandozeilenwerkzeug, das zum Injizieren von Code und zum Haken des Einstiegspunkts von ELF-Programmen nach dem Build verwendet wird. Es nimmt unveränderte ELF-Programme als Eingabe und exportiert eine modifizierte ELF-Datei, die eine benutzergegebene Nutzla...

CVE-2021-40444--CABless

CVE-2021-40444--CABless version Update: Modified code so that we don´t need to rely on CAB archives the file "index.html" that triggers payload execution will contain 1 line of code only, inside 'script' tag: An article in PDF format is provided. Update: link to video demo -...

horrors-log4shell

horrors-log4shell A micro lab playground? for CVE-2021-44228 log4j Can be used for executing payloads against multiple targets. Target-specific payloads are generated runtime. Adjustable configuration and bypasses. Installation Java-related requirements Development / Running example Gradle Maven ...

Malicious code in crypto-key-utils (RubyGems)

RubyGems runs this gem's native extension script ext/crypto-key-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17594 Malicious code in crypto-key-utils (RubyGems)

RubyGems runs this gem's native extension script ext/crypto-key-utils/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...

MAL-2026-17299 Malicious code in testosu8887 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9d3296b770afd3fdebaf4df9d113873e9c77d2d498d2e7941a3465eeb6f97d On require or CLI invocation, dist/index.cjs and dist/cli.cjs call a top-level function dispatchAnalytics, invoked via he/Re that reads a bundled ima...

MAL-2026-16127 Malicious code in eth-account-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...