12904 matches found
POC-bomber
🔥 POC-bomber 🦄 POC bomber es una herramienta de detección/explotación de vulnerabilidades, diseñada para obtener rápidamente permisos del servidor objetivo utilizando una gran cantidad de POC/EXP de vulnerabilidades de alto impacto Este proyecto recopila POC/EXP de vulnerabilidades de alto impact...
Christmas
Maldev Academy Maldev Academy 首页 Maldev Academy 课程大纲 Christmas 实现了 @Hexacorn 提到的一种注入方法。 此 PoC 会创建多个进程，每个进程在注入操作中执行特定任务。每个子进程都会生成另一个进程，并通过命令行传递所需信息。 该程序按以下步骤执行： 1. 第一个子进程创建将被注入 payload 的目标进程。该句柄会被所有后续子进程继承。 2. 第二个子进程将在目标进程中分配内存。 3. 第三个子进程将把先前分配的内存权限更改为 RWX。 4. 接下来，针对 payload 的每 1024...
PoC
Pedro Ribeiro（@pedrib）漏洞利用收集站 本仓库包含我公开发布的信息、漏洞利用、脚本等内容，位于 https://github.com/pedrib/PoC。 advisories：我公开发布的所有安全公告、研究笔记等 Pwn2Own：与我的 Pwn2Own 参赛经历相关的安全公告 exploits：我公开发布的所有漏洞利用代码 metasploit：我自己创建并集成到 Metasploit framework 中的 Metasploit 模块 Pwn2Own：在我参加的 Pwn2Own 比赛中创建或使用的 Metasploit 模块 fuzzing：已分配 CVE...
poc_exploit_paxton_license
Paxton NET2 软件密钥生成器的 POC 漏洞利用 此 POC 会生成一个有效的许可证文件，以使用 Paxton NET2 API。...
CVEs
Rhino CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs. CVE-2026-46546: Frappe LMS Header Tag Injection Leading to Open Redirect CVE-2026-39405: Frappe LMS Path Traversal in SCORM Package Upload Leading to...
CVE-2018-2628
CVE-2018-2628 简单解读：https://mp.weixin.qq.com/s?biz=MzU0NzYzMzU0Mw==&mid=2247483673&idx=1&sn=45360b4ed1c95947088121b28cb1e45e&chksm=fb4a21f1cc3da8e748b3ac6e37ac483b917857c2338b9c3f7d315c842157397e7435a7c02bb8rd or...
CVE-2026-48907-Joomla-JCE-detection
Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts and SOC Detection Defensive validation report and SOC-oriented detection notes for CVE-2026-48907 affecting Joomla Content Editor JCE versions up to 2.9.99.4. Repository purpose This repository documents a controlled laboratory...
honeybits
Honeybits A simple PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your production servers and workstations to lure the attacker toward your honeypots. Author: Adel "0x4D31" Karimi. The Windows version of this project: honeybits-win...
Firework
⚠️ NOTE: This tool is no longer under active maintenance. Firework Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process. The tool also wraps some code from Responder to leverage its ability to capture NetNTLM hashes...
poc_CVE-2024-32002_submodule
This repository does not have a README...
FullPowers
FullPowers FullPowers is a Proof-of-Concept tool I made for automatically recovering the default privilege set of a service account including SeAssignPrimaryToken and SeImpersonate. Rationale On Windows, some services executed as LOCAL SERVICE or NETWORK SERVICE are configured to run with a...
lazyCSRF
LazyCSRF LazyCSRF is a more useful CSRF PoC generator that runs on Burp Suite. No longer maintenance🙇 When I started developing lazyCSRF, I mistakenly thought that the CSRF PoC generator built into Burp Professional could not generate PoC using XHR and did not support PUT requests, etc. I am stil...
CVE-2018-6606
CVE-2018-6606 This terminates any PID. Tested on Windows 10 64-bit, Flare VM. Administrator privileges are required. Some adjustments may be needed — see resource.rc. Toolchain Download:...
CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN
CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN 用于利用 Checkpoint Firewall VPN 中 CVE-2024-24919 漏洞的利用工具 安装： root@kitploit: git clone https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN 依赖： root@kitploit: pip install -r requirements.txt 帮助 root@kitploit: python3...
CVE-2019-2725
POC-EXP This script targets the CVE-2019-2725 WebLogic deserialization RCE vulnerability. Before use, please modify the VPS listening address, and submit the specified URL at runtime to complete the test. The test address is: http://192.168.209.134:49163/async/AsyncResponseService After modifying...
Dr.DLL-CVE-2018-18333
Attack CVE Windows - CVE-2018-18333 前提条件 📋 Names| Method of install ---|--- metasploit| Click for install pythonv.X| apt install python 执行: Execute 🚬 root@kitploit: 1. $ sudo python Dr.Dll.py 2. 输入请求的数据（Enter the requested data） 3. 启动 metasploit Start metasploit 可选 4. Happy Hacking :...
PoC_CVEs
PoC CVEs — Proof-of-Concept Repository Index A continuously updated index of public GitHub proof-of-concept repositories mapped to CVE identifiers. Strictly for educational and defensive security research purposes. Live Search Interface labs.jamessawyer.co.uk/cves/ A searchable web interface over...
CVE-2020-3452
CVE-2020-3452 TL;DR This is an exploit for CVE-2020-3452. It's not entirely finished yet. Use it in legal context. If you fuck up it's your problem. W00t is dis? This is a quick'n dirty try to enhance the original PoC of CVE-2020-3452. At the current stage there is nothing more than a simple py...