CVE-2024-23346

CVE-2024-23346 This PoC is based on the report/findings of William Khem-Marquez and Matthew Horton: https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f Usage: python3 CVE-2024-23346.py -t targetURL -u username -p password -l localhost -P localport -X -P and -X are...

cve-2020-5902

cve-2020-5902 cve-2020-5902 POC exploit root@kitploit: POC CVE-2020-5902 - r0ttenbeef Usage: cve-2020-5902.py options Options: -h, --help show this help message and exit -u URL, --url=URL specify target url EX:http://100.200.300.10/ -i, --info grap some informations -f FILENAME, --file=FILENAME...

nimbostratus

Nimbostratus अमेज़न क्लाउड इंफ्रास्ट्रक्चर की फ़िंगरप्रिंटिंग और शोषण के लिए उपकरण। ये उपकरण एक PoC हैं जिसे मैंने अपने "अमेज़न क्लाउड्स में पिवोटिंग" वार्ता के लिए विकसित किया था, शानदार boto लाइब्रेरी का उपयोग करके अमेज़न के API तक पहुँचने के लिए बनाया गया है। अधिक जानकारी के लिए प्रोजेक्ट पेज ...

CVE-2024-24576-PoC---Nim

Exploring Command Injection Vulnerabilities in Windows with Nim https://foxoman.hashnode.dev/exploring-command-injection-vulnerabilities-in-windows-with-nim?showSharer=true Here's a summarized table based on the testing results from the Nim code experiments with different payloads:...

CVE-2019-9978

CVE-2019-9978 - Social Warfare WordPress Plugin RCE system'cat /etc/passwd' ✅ Step 2 – Start a Python HTTP Server Use Python to serve your payload: root@kitploit:...

CVE-2023-22524

Atlassian Companion RCE भेद्यता का Proof of Concept CVE-2023-22524 अवलोकन यह रिपॉजिटरी हाल ही में खोजी गई Atlassian Companion for macOS में रिमोट कोड निष्पादन भेद्यता CVE-2023-22524 के लिए एक proof of concept PoC प्रदान करती है। यह महत्वपूर्ण समस्या हमलावरों को ऐप की ब्लॉकलिस्ट और macOS Gatekeepe...

CVE-2023-48084

CVE-2023-48084 Fixes broken syntax in the POC, primarily incorrect import and incorrect referral to API functions. automates the APIToken retrieval, stores the token as a variable and pipes into the fixed POC. https://github.com/Hamibubu/CVE-2023-48084 If for some reason this does not work,...

LPE---CVE-2020-0796

Usage: Make sure Python is installed, then run poc.py. Windows Kernel Write-What-Where CVE-2020-0796 Exploit Intended only for educational and testing in corporate environments. MasterSpl0it takes no responsibility for the code, use at your own risk. Rewritten CVE-2020-0796 Local Privilege...

CVE-2023-38831

CVE-2023-38831 PoC This is an easy to use exploit for the CVE-2023-38831 Usage Check vulnerable versions: Run the exploit: Get the shell:...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Proof-of-concept exploit for the Log4j vulnerability CVE-2021-44228, also known as Log4Shell. This tool generates a malicious Java class, starts an LDAP referral server, and serves the payload over HTTP, allowing a remote attacker to execute arbitrary commands on a...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...

CVE-2024-27198

GenTeamCityExploit — это PoC-инструмент, нацеленный на уязвимость сервера TeamCity CVE-2024-27198. Он позволяет обнаружить версию TeamCity и создать нового администратора, используя уязвимость обхода аутентификации. Возможности Извлекает версию сервера TeamCity. Проверяет наличие известной...

CVE-2020-13925

CVE-2020-13925 Environment Setup Refer to https://github.com/apache/kylin to deploy using Docker, and change the version to 3.0.1 the vulnerable version. You can remove -m 8G \ it controls the allocated memory size. Then visit http://host:7070/kylin/login. The default username and password are...

CVE-2021-3929-3947

CVE-2021-3929-3947 VM escape PoC for CVE-2021-3929 and CVE-2021-3947. Educational purposes only. You can read the white paper for more information. Environment root@kitploit: OS: Ubuntu 21.10 Linux: 5.13.0 gcc: 11.2.0 glibc: 2.34 glib: 2.68.4 QEMU: 6.1.0 Guest OS: Ubuntu 21.04 Commands Host...

CVE-2022-0169

CVE-2022-0169 — WordPress Photo Gallery SQLi PoC This is a simple Python proof-of-concept PoC for CVE-2022-0169 , an SQL injection vulnerability in the WordPress Photo Gallery plugin. What it does Checks the WordPress version if available Exploits the vulnerable admin-ajax.php endpoint Dumps...

-CVE-2024-24450-

-CVE-2024-24450- CVE-2024-24450 के लिए hypo poc बाद में परीक्षण करें...

CVE-2021-21402-Jellyfin

CVE-2021-21402-Jellyfin Arbitrary File Read This POC is for learning and communication only. I am not responsible for any consequences arising from its use. python POC.py targets.txt...

xss2shell

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit Behavior-first mass scanner and evidence-grade PoC generator for the WordPress pre-auth XSS-to-RCE chain affecting 500M+ websites. Detection only. No weaponization. Built for bug bounty programs and blue teams. Official Checker:...

CVE-2020-8515-PoC

CVE-2020-8515-PoC CVE-2020-8515-PoC...

Blinder

Blinder Blidner is a small python library to automate time-based blind SQL injection by using a pre defined queries as a functions to automate a rapid PoC development. Installation You can install Blinder using the following command: pip install blinder Or by downloading the source and importing ...