CVE-2019-0708

CVE-2019-0708 Proof of concept exploit for CVE-2019-0708 Coming soon https://areusecure.se?CVE-2019-0708...

CVE-2022-31814

pfBlockerNG = 2.1.426 Unauth RCE This script is a proof-of-concept exploit for pfBlockerNG = 2.1.426 that allows for remote code execution. It takes a single target URL or a list of URLs, uploads a shell, executes a command, and then deletes the shell. Requirements This script requires Python 3.x...

CVE-2020-0796-LPE

CVE-2020-0796-LPE SMBGHOST local privilege escalation https://github.com/ZecOps/CVE-2020-0796-LPE-POC https://github.com/danigargu/CVE-2020-0796...

CVE-2022-45460

Proof of Concept for CVE-2022-45460 Detailed write-up is available here...

cve

CVE PoC Almost every publicly available CVE PoC. Current hottest CVEs...

Dop2Mop

Dop2Mop A proof-of-concept OpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure. Based on Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure by Brett Hawkins @h4wkst3r. Table of Contents Acknowledgments Overview Supported Platforms...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

poc-cve-2018-16875

This repository does not have a README...

CVE-2020-8515-PoC

CVE-2020-8515-PoC CVE-2020-8515-PoC...

CVE-2020-1350

CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...

OSINT-with-LLM

POC : OSINT with LLM This repository demonstrates domain, IP, and email reconnaissance with LLM-powered security reporting.. Overview The project is divided into two main components : 1. Recon Modules 2. LLM Analysis and reporting Recon Modules Purpose Gathering information about an ip, domain or...

CVE-2022-1040

CVE-2022-1040 may the poc with you 外面捡来的 root@kitploit: curl --insecure -H "X-Requested-With: XMLHttpRequest" -X POST 'https://x.x.x.x/userportal/Controller?mode=8700&operation=1&datagrid=179&json="🦞":"test"'...

mdk4

MDK4 MDK is a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses. About MDK4 MDK4 is a new version of MDK3. MDK4 is a Wi-Fi testing tool from E7mer, ASPj of k2wrlz, it uses the osdep library from the aircrack-ng project to inject frames on several operating systems. Many part...

C-PoC-for-CVE-2024-21306

install dependencies from apt sudo apt install -y bluez-tools bluez-hcidump libbluetooth-dev git gcc python3-pip python3-setuptools python3-pydbus install pybluez from source git clone https://github.com/pybluez/pybluez.git cd pybluez sudo python3 setup.py install build bdaddr from the bluez sour...

CVE-2022-42889-Text4Shell-Docker

CVE-2022-42889-Text4Shell-Docker Dockerized PoC for CVE-2022-42889 Text4Shell...

CVE-2020-9273

CVE-2020-9273 These are the files I created during analysis and exploitaion of CVE-2020-9273 - a heap use-after-free in ProFTPd. Take a look at the exploit video here. Description about the files in this repo: poc-not-really-v4.c - an article and poc I wrote last year oct/2020, read to understand...

CVE-2023-23397

CVE-2023-23397 A proof of concept for CVE-2023-23397 for security testing. Modify lines 11 and 12 with the attacker UNC path and target email address...

OpenPetya

OpenPetya A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++ If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this...

CVE-2022-22947-goby

CVE-2022-22947-goby Regularly updated some casually written goby POCs, including high-risk EXP. goby CVE202222947.json...

log4shellpoc

Simple Spring Boot application vulnerable to CVE-2021-44228 Log4Shell This proof-of-concept application for CVE-2021-44228 a.k.a log4shell is a part of my writeup. For the complete exploit details, refer to the writeup. Instructions Run: root@kitploit: docker run --rm -p 8080:8080 --name...