RCE-RealEstateVIDEOPOC

This repository does not have a README...

coldfusion-amf

coldfusion-amf Coldfusion AMF PWN pwn http://localhost "nslookup burpcollab.net"...

CVE-2022-0944

CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username optional password log...

POC-CVE-2025-68613

POC-CVE-2025-68613 My poc to exploit this vuln :D...

CVE-2022-29221-PoC

CVE-2022-29221-PoC I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2022-29221-PoC...

PoC-CVE-2025-55182

The Script exploits CVE-2025-55182, an RCE that affects the React Server Components used in React.js and Next.js. Affected React Versions: 19.0.0 19.1.0 and 19.1.1 19.2.0 Next.js: Next.js 15.x all versions prior to fixes Next.js 16.0.0 initial alpha/beta/RC versions built on vulnerable React 19...

cve-2015-6612poc-forM

cve-2015-6612 POC for M reported by me and @WenXu from Keen put this under ANDROIDSRCROOT/frameworks/av/media/decrytpoc/ and cd into it && calling mm...

cve-2024-0582

PoC for CVE-2024-0582 While learning about the iouring interface, I decided to create a PoC for CVE-2024-0582. All of this work is derived directly from the CVE information, the patch and a few other write ups related to io uring -- particularly Chompie's write up of CVE-2021-41073...

Apache-Struts-Shodan-Exploit

APACHE STRUTS SHODAN EXPLOIT POC Author: @037 Original code can be found here. This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers. Shodan search parameter has been left out to weed out any skids trying to use this...

PoC-Malware-TTPs

PoC-Malware-TTPs Proof of Concept Code Repository for Malware TTPs...

PoC-public

PoC-public This repository collects PoC code that we published at various security conferences. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...

CVE-2022-29548

Proof of concept exploit for CVE-2022-29548: A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server...

CVE-2019-3980

CVE-2019-3980 This repo was created to utilize the Nessus POC with a custom C executable to run commands on a remote host and get the output of the command. The python file is used to start a web server, execute the exploit, and then get the results over the web server. The C exe is uploaded...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 Python POC buffer overflow https://github.com/eerykitty/CVE-2020-0796-PoC...

ExploitDev

ExploitDev Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/...

next-16.2.4-pocs

Next.js v16.2.4 Security PoC Collection This repository collects reverse-engineered proof-of-concept material for the security issues fixed in Next.js v16.2.5. The root of the repo holds the release-window analysis, and poc/ holds one PoC bundle per advisory. This collection was reverse-engineere...

node-poc-http-smuggling

This repository does not have a README...

Detrix-Passwords-PoC

Exploit for obtaining Detrix users' passwords. http://forum.detrix.kz https://zen.yandex.ru/media/id/5d947e04f73d9d00ad0e86cc/uiazvimosti-sed-detrix-besplatnoi-programmy-avtomatizacii-dokumentooborota-5d947e2e92414d00ae292db7...

CVE-2019-25065-exploit

CVE-2019-25065 - POC This is a POC of CVE-2019-25065 - OS command injection in OpenNetAdmin v18.1.1 The exploit is written in bash, it supports linux environment. was tested on kali linux 2024.4, and Ubuntu 22.04.5 LTS dependencies: gridsite-clients debian package...

IFA

IFA Disk Flooding Attack via IndexedDB IFA is an Proof of Concept PoC that demonstrates how an attacker can exploit the IndexedDB API in popular web browsers to carry out a disk flooding attack. This attack specifically leverages the lack of restrictions in IndexedDB, allowing the browser to stor...