20625 matches found
SQLC2
SQLC2 SQLC2 — это скрипт PowerShell для развертывания и управления системой управления и контроля C2, которая использует SQL Server как в качестве сервера управления, так и в качестве агента. По сути, SQLC2 — это просто скрипт PowerShell, скрипт TSQL и несколько таблиц в экземпляре SQL Server,...
UnmarshalPwn
UnmarshalPwn POC for CVE-2018-0824 For details see https://codewhitesec.blogspot.com/2018/06/cve-2018-0624.html...
CVE-2021-3129
CVE-2021-3129 PoC for CVE-2021-3129 Laravel For educational purposes only Test Set up the PoC environment $ docker-compose build $ docker-compose up -d Confirm it works See http://localhost:8000/ and make sure the Laravel default page is shown. Exploit $ docker-compose exec attacker sh / python3...
CVE-2025-24893-PoC
Disclaimer: The vulnerabilities and reproduction steps described in this document are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no...
CVE-2022-22954-PoC
CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...
bucky
Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...
CVE-2025-31486
CVE-2025-31486-PoC.py url image For details on vulnerability reproduction and specific environment setup, please refer to：https://chenchena.blog.csdn.net/article/details/147150357?spm=1001.2014.3001.5502...
CVE-2020-3161
CVE-2020-3161 Cisco IP Phone 11.7 - Denial of Service PoC...
CVE-2025-55182
CVE-2025-55182 POC This repository contains a proof of concept POC for CVE-2025-55182, demonstrating the vulnerability and its exploitation. Weak server "dependencies": "next": "16.0.6", "react": "19.2.0", "react-dom": "19.2.0" , Weak server 2 "dependencies": "next": "^15.0.0", "react": "^19.0.0"...
CVE-2024-21683-RCE
Usage python poc.py -u http://localhost:8090 -user admin -pass admin -f exploit.js -n test -p http://127.0.0.1:8080 POC...
libping_unhash_exploit_POC
This repository does not have a README...
CVE-2022-30190
CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will literally not run i...
GenEtherExploit
EN GenEtherExploit is a Proof-of-Concept PoC exploit for the macOS vulnerability CVE-2023-40404. This PoC leverages IOKit APIs to interact with the IOUserEthernetResource network service, manipulating the system's network interfaces. The purpose of this exploit is to demonstrate a potential kerne...
Graver
Graver Description Proof of Concept script to exploit the authenticated SSTI+RCE in Grav CMS CVE-2024-28116. It creates a malicious RCE page on the server running the vulnerable Grav CMS. References: https://nvd.nist.gov/vuln/detail/CVE-2024-28116 Notes Since it is an authenticated vulnerability ...
ibrute
ОБНОВЛЕНИЕ Если вас беспокоит безопасность облачного хранения, пожалуйста, прочитайте What if I was a cloud? и оставьте свой отзыв. Спасибо. Конец веселью, Apple только что исправили Вот pOc для брутфорса пароля appleID. Это всего лишь p0c, поэтому нет Функция многопоточности Функция...
CVE-2022-26134
pip3 install -r requirements.txt use: python3 exp.py url "cmd" example: python3 exp.py http://192.168.1.1/ whoami...
CVE-2024-42346
CVE-2024-42346 CVE-2024-42346 video: https://github.com/user-attachments/assets/e5e82cfa-d96c-44b2-bc84-0149022e5508 Read more things on:...
text4shell-exploit
Text4shell-exploit This is a Proof of Concept exploiting the vulnerability in Apache Commons Text CVE-2022-42889 Vulnerable versions : 1.5.0 to not including 1.10.0 Impact Successful exploitation of this vulnerability allows an unauthenticated attacker to execute arbitrary code on the vulnerable...
CVE-2024-28000
CVE-2024-28000 CVE-2024-28000 Exploit for litespeed-cache =6.3 allows Privilege Escalation with creation of administrator account Build git clone https://github.com/JohnDoeAnonITA/CVE-2024-28000 cd CVE-2024-28000 go build . Disclaimer This PoC is for educational purposes only. Do not use this...