CVE-2021-4034

CVE-2021-4034 Proof of Concept for CVE-2021-4034 Polkit Privilege Escalation...

AOSP-DownloadProviderHijacker

AOSP-DownloadProviderHijacker PoC Exploiting Permission Bypass in Android's Download Provider CVE-2018-9468 Security Advisory https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-Permission-Bypass-CVE-2018-9468.pdf More Information...

log4j_github_repository

This work includes testing and improvement tools for CVE-2021-44228log4j The purpose of this study is to list useful tools that the blue and red team can use against the Log4j vulnerability. Github links bypass tools, scanning, detection mechanisms, etc. can be used for. Scanning or POC 🔴 Title:...

CVE-2021-4034

CVE-2021-4034 POC for the priv esc exploit in PKEXEC CVE -2021-4034 needs fixing, not the best Converted into go make all && ./pwnkit && make clean...

BokuLoader

BokuLoader : Cobalt Strike Reflective Loader A proof-of-concept User-Defined Reflective Loader UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors: Contributor| Twitter| Notable Contributions ---|---|--- Bobby Cooke| @0xBoku| Project original author...

CVE-2023-22527

CVE-2023-22527 PoC of CVE-2023-22527...

Clickjacking-Tester

Clickjacking Tester A python script designed to check if the website is vulnerable of clickjacking and creates a poc. Screenshot Usage python3 clickjackingtester.py Example Input python clickjackingtester.py sites.txt sites.txt www.google.com www.turkhackteam.com Output Checking www.google.com -...

CVE-2021-44228-Log4Shell-POC

CVE-2021-44228-Log4Shell-POC Complete POC for Infamous Log4j CVE-2021-44228 Prerequisites Download and Install Java from here, you can use jdk-8u181. Install IntelliJ Idea from here POC Step 1 : Clone this repository. Step 2 : Move Exploit.java file to a different folder. Like in my case I've...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

testanull-CVE-2021-42321_poc.py

This repository does not have a README...

CVE-2021-4034

CVE-2021-4034 A stupid poc for CVE-2021-4034 - Local privilege escalation pkexec SUID binary Vulnerability explained in the advisory here...

optionsbleed

optionsbleed This is a proof of concept code to test for the Optionsbleed bug in Apache httpd CVE-2017-9798. Please consider using the tool Snallygaster instead, it has a check for optionsbleed included: snallygaster -t optionsbleed host usage optionsbleed -h -n N -a -u hosttocheck Check for the...

exploits

Public Proof-of-Concept Exploits Repository This repository contains public proof-of-concept PoC exploits for various vulnerabilities that I have discovered over time. These PoC exploits are shared for educational purposes and to demonstrate the potential risks associated with the vulnerabilities...

HugeDirtyCowPOC

"Huge Dirty Cow" POC A POC for the Huge Dirty Cow vulnerability CVE-2017-1000405. Full details can be found here. Before running, make sure to set transparent huge pages to "always": echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

make_me_root

CVE-2021-4034-PwnKit PwnKit PoC for Polkit pkexec CVE-2021-4034 Based on the PoC by blasty blasty-vs-pkexec.c For PwnKit details see the blog poet at Qualys PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec CVE-2021-4034...

CVE-2019-0708-POC

CVE-2019-0708-POC cve-2019-0708 poc . Run Test Work well for winxp sp3. Need test for win 7. Runtime: win10 x64 python3 PS D:\workspace\python\sqlstruct\sqlstruct\sqlstruct python3 .\poc.py -t 192.168.1.112 -p 3389 CVE-2019-0708 Remote Detection tool by: closethe + Connecting to RDP server. +...

IFA

IFA Disk Flooding Attack via IndexedDB IFA is an Proof of Concept PoC that demonstrates how an attacker can exploit the IndexedDB API in popular web browsers to carry out a disk flooding attack. This attack specifically leverages the lack of restrictions in IndexedDB, allowing the browser to stor...

CVE-2021-4034

usage: sh poc.sh...

flash-xdomain-xploit

Author: Gursev Singh Kalra [email protected] Bypassing Same Origin Policy with Flash and Insecure crossdomain.xml Compiling and deploying the Proof of Concept ActionScript code 1. Download and install Apache Flex SDK. It comes with an ActionScript compiler. 2. Copy the ActionScript code to...

Strutter

Strutter Proof of Concept for CVE-2018-11776, comes complete with the ability to search Shodan API for targets CVE-2018-11776 Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when using results with no namespace and in same time, its upper actions...