CVE-2023-26255-6

Jira plugin STAGIL Navigation FileName Parameter Arbitrary File Read Vulnerability POC Script Usage as follows: Single URL Detection 1. Use the command line to detect a single URL, pass the URL parameter with -U 2. Observe the returned result; if it shows "is vulnerable!", then the vulnerability...

OpenSSL-HeartBleed-CVE-2014-0160-PoC

This repository does not have a README...

Why-so-Serious-SAM

HiveNightmare 'Fileless' Exploit PoC: Table of Contents Overview Features Lab Simulation Example Reconnaissance with Google Dorks LOLBins Overview Fileless Dropper Embedding Exploiting Print Spooler & HiveNightmare Reflective DLL Injection MITRE ATT&CK Mapping Detection & Mitigation Legal...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage root@kitploit: echo "+-------------------For-The-Help-------------------------------------+"; ec...

-cve-2022-22947-

-cve-2022-22947- cve-2022-22947 spring cloud gateway batch scanning script usage: python3 springcloudpoc.py ./urls.txt Use urls.txt to store url information URL format: https://xxx.xx.xx/ one per line Original Script Reference:...

CVE-2021-34473

CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability Reproducing ProxyShell Exploit https://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell/ This is NOT your Cyberweapon just a experimental PoC...

qark

Quick Android Review Kit 此工具旨在查找 Android 应用程序中的多个安全相关漏洞，无论是源代码还是打包的 APK。该工具还能够创建“概念验证”可部署 APK 和/或 ADB 命令，能够利用它发现的许多漏洞。无需对测试设备进行 root，因为此工具专注于在原本安全的环境下仍可被利用的漏洞。 需求 已在 Python 2.7.13 和 3.6 上测试 已在 OSX、Linux 和 Windows 上测试 用法 更多选项请参见 --help 命令。 APK:: qark --apk path/to/my.apk Java 源码文件:: qark --java...

CVE-2023-24078

Description This script is a Proof of Concept PoC exploit I developed for CVE-2023-24078. After trying the publicly available PoCs that were not functional and facing frustration in trying to troubleshoot them, I just created my own script. Usage root@kitploit: usage: python3 CVE-2023-24078.py -h...

CVE-2023-25136_POC

CVE-2023-25136 POC POC For A Pre Auth Double Free Vulnerability Affecting OpenSSH 9.1 To 9.2 Neccessary libraries Please make sure you have the following dependencies installed: Python 3 duh termcolor argparse fabric You can also install these libraries directly from the included requirements.txt...

cve-2020-28948

CVE-2020-28948 POC Link: https://github.com/0x240x23elu/CVE-2020-28948-and-CVE-2020-28949...

burpsuite-copy-as-xmlhttprequest

XMLHttpRequestとしてコピー BurpSuite 拡張機能 この拡張機能は、BurpSuiteにコンテキストメニューを追加し、複数のリクエストをJavascriptのXmlHttpRequestとしてコピーできるようにします。これにより、XSSを悪用する際のPoC開発が簡素化されます。 インストール 最新のJARをリリースからダウンロードするか、手動でビルドしてください BurpSuiteのタブ「Extender」→「Extensions」→「Add」を使用してJARを追加してください 使用方法 任意のタブから1つのリクエストを選択するか、「Proxy」→「HTTP...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...

Heptagram

Heptagram Este proyecto se utiliza para recopilar los EXP/POC divulgados en Internet y proporcionar soporte de proyecto para el equipo de seguridad de Heptagram...

CVE-2025-32463_PoC

CVE-2025-32463 NVD CVE-2025-32463 In most cases, GCC is not installed by default on target servers. This proof of concept provides a precompiled version to ensure it can be executed immediately on affected systems. Usage 1. Compile the woot1337.c file: root@kitploit: gcc -shared -fPIC...

BEAST-PoC

BEAST-PoC chosen-plaintext attack This proof of concept is focused on the cryptography behind the BEAST Browser Exploit Against SSL/TLS attack presented by Thai Duong and Juliano Rizzo on September 23, 2011. This a chosen-plaintext attack and this allow you to retrieve sensitives informations if...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

CVE-2019-0708

CVE-2019-0708 PoC シェルコードは現在までにx86版Windowsでのみテストされています。責任を持ち、善意でのみ使用してください。...

CVE-2019-18818

CVE-2019-18818 Strapi = 3.0.0-beta exploit POC...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. Affected versions The exploit affects versions from includin...