xzf

Introduction xzf is a simple PoC demonstrating how EXIF data can be used for command and control. xzf GETs an image from a predetermined URL, then reads the software tag for an authentication string. If the string matches, xzf will execute anything contained within the ImageDescription tag. Usage...

poc-cve-2019-5736

PoC-CVE-2019-5736 PoC for CVE-2019-5736...

FuxiOS

FuxIOS.py v2.0 - CVE-2016-4631 Exploit PoC � Nota Personal 2025 ¿Por qué publico esto ahora? Mientras revisaba viejos discos duros y repositorios olvidados, me encontré con este script que escribí hace años cuando apenas comenzaba mi carrera en ciberseguridad. Era una época diferente - Python 2.7...

CVE-2024-35315-POC

Este repositorio no tiene un README...

tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

CVEsLab

CVEsLab A collection of proof-of-concept exploit scripts, docker lab environments, and Securi Trust Team-discovered vulnerabilities for written by the team at Securi Trust for various CVEs...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...

SNIcat

SNIcat Server Name Indication Concatenator SNIcat is a proof of concept tool that performs data exfiltration, utilizing a covert channel method via. Server Name Indication , a TLS Client Hello Extension. The tool consists of an agent which resides on the compromised internal host, and a Command...

CVE-2022-46169

CVE-2022-46169 POC Proof of concept / CTF script for exploiting CVE-2022-46169 in Cacti, versions =1.2.22 This script was written to solve a CTF challenge. It was based on the following example scripts - I had difficulty understanding what these scripts actually did, so I re-wrote my own...

Apache-spark-CVE-2022-33891

Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Síguenos Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Código fuente basado en: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Instalación Python 3.8 + pip install requests Windows 10 SO, Linux Ubuntu Uso python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80...

spring-amqp-deserialization

spring-amqp-deserialization Una Prueba de Concepto de la Vulnerabilidad de Deserialización de Spring AMQP CVE-2023-34050 Versiones afectadas: 1.0.0 a 2.4.16 3.0.0 a 3.0.9 Referencia: https://spring.io/security/cve-2023-34050...

CVE-2023-51764-POC

based on https://github.com/duy-31/CVE-2023-51764 and https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text its just some poc port to python 3.x...

security-labs-pocs

Datadog Security Labs Research and Proof of Concept Code This repository contains information, exploits, malware samples, and scripts from Datadog Security Labs. Goal This repository aims at providing proof of concept exploits, malware samples and technical demos to help the community respond to...

cve-2019-0708

cve-2019-0708 POC CVE-2019-0708 with python script! Video POC: https://www.youtube.com/watch?v=XVmCtUMELdU...

CVE-2021-44827

CVE-2021-44827 A PoC for CVE-2021-44827 - authenticated remote code execution in Tp-link Archer C20i Write-up: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html Example $ python exploit.py error0 error0 Run postexploitcmd Trying 192.168.0.1...

CVE-2022-22965-PoC

CVE-2022-22965 Spring4Shell Proof of Concept Test the RCE Remote Code Execution in Spring Core​ Build the image BuildKit based build is required so you need to enable it. Easiest way is to set the DOCKERBUILDKIT=1 environment variable when invoking the docker build command, such as: $...

pdfjs-vuln-demo

PDF.js Vulnerability Demo Project This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js pdfjs-dist library reported in CVE-2024-4367 Getting Things Running Fork and clone from this repository npm install npm run dev Testing Things Out...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk is a proof-of-concept not actively maintained or enhanced bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives. Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can...

tools

About This section offers a selection of our fully featured security and hacking tools. We also provide some exploits, proof of concept code, shellcodes and snippets. That means some tools are not tested and may not have the feature set. If you find some bugs or if you have any questions, ideas o...