20834 matches found
PinTheft-asm
pintheft-asm Rewrote PinTheft-go in raw x86-64 asm because why not. make ./pintheft Drops a root shell. Restore command printed on exit. For details → original PoC...
abstractshimmer
ABSTRACT SHIMMER CVE-2020-15257 This repo contains proof-of-concept exploit code for CVE-2020-15257 as described in our blog post. While written for containerd 1.2.x and 1.3.x, it should work on pre-patch versions of containerd 1.4.x. $ go build $ docker build -t abstractshimmer . $ docker run --...
Watchguard-RCE-POC-CVE-2022-26318
Watchguard-RCE-POC-CVE-2022-26318 PoC for Watchguard CVE-2022-26318 actualizado para funcionar con Python3.12 ya que ssl.wrapsocket está obsoleto. PoC originalmente de https://github.com/h3llk4t3/Watchguard-RCE-POC-CVE-2022-26318/blob/main/POCwg.py...
IoT_vuln
POC for TOTOLINK devices: TOTOLINK LR350: CVE-2024-10654 login bypass TOTOLINK T6: CVE-2025-6916 login bypass - for a deeper dive into this CVE, read more at: https://anduinbrian.github.io/posts/blogs/totolink-t6-v3/...
shellshocker-pocs
Shellshocker - Repository of "Shellshock" Proof of Concept Code Collection of Proof of Concepts and Potential Targets for ShellShocker Wikipedia Link: https://en.wikipedia.org/wiki/Shellshock%28softwarebug%29CVE-2014-7186andCVE-2014-7187Details Please submit a pull request if you have more links ...
Malicious code in merkle-proof-lite (RubyGems)
RubyGems runs this gem's native extension script ext/merkle-proof-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...
MAL-2026-17609 Malicious code in merkle-proof-lite (RubyGems)
RubyGems runs this gem's native extension script ext/merkle-proof-lite/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...
CVE-2026-20700-POC-that-ll-never-work
This repository does not have a README...
NoFrak
NoFrak NoFrak is a Proof of Concept implementation for Android designed to prevent fracking attacks described in "Breaking and Fixing Origin-Based Access Control in Hybrid Web/Mobile Application Frameworks", by Martin Georgiev, Suman Jana, and Vitaly Shmatikov. NDSS 2014. Cordova Android Cordova...
CVE-2023-38545
CVE-2023-38545: Curl Vulnerability Proof of Concept This repository contains a Proof of Concept PoC designed to test systems for the CVE-2023-38545 vulnerability. The vulnerability affects the curl utility, specifically versions between 7.69.0 and 8.3.1, and is related to the handling of HTTP...
CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara
PoC for CVE-2017-16744 and CVE-2017-16748 Proof of Concept PoC CVE: 2017-16744 and 2017-16748 Date: 09/09/2019 Exploit Author: GainSec - Jon Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 and prior as well as Niagara 4 Versions: 4.4 and prior...
credssp
credssp This is a poc code for exploiting CVE-2018-0886. It should be used for educational purposes only. It relies on a fork of the rdpy projecthttps://github.com/preempt/rdpy, allowing also credssp relay. Written by Eyal Karni, Preempt [email protected] Build Instructions Linux If you are...
CVE-2021-22893
CVE-2021-22893 Script de prueba de concepto PoC para explotar Pulse Secure CVE-2021-22893. Uso Logra ejecución remota de código RCE en Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit.sh -l IPList.txt...
CVE-2022-21907-Vulnerability-PoC
CVE-2022-21907 Descripción - POC para CVE-2022-21907: Vulnerabilidad de ejecución remota de código en la pila del protocolo HTTP. - Creado por antx el 2022-01-17, solo algunas pequeñas correcciones de Michele "[email protected]" Detalle - Vulnerabilidad de ejecución remota de código en la...
uWSGI-CVE-2018-7490-POC
This repository does not have a README...
CVE-2020-11652
CVE-2020-11652 saltstack CVE-2020-11652 Reference https://github.com/jasperla/CVE-2020-11651-poc...
CVE-2026-31431-Copy-Fail
CVE-2026-31431 Copy Fail Exploit precompilado para CVE-2026-31431 Copy Fail. Código fuente original de tgies/copy-fail-c, con el objetivo de compilación i386 x8632 añadido. Descubrimiento de la vulnerabilidad y PoC original por theori-io/copy-fail-CVE-2026-31431. Artículo canónico: copy.fail...
CVE-2017-5638
CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...
UAC-bypass
UAC-bypass Please note: It is a Proof of Concept and is not intended for illegal usage! Visit my website: https://winscripting.blog/ Please donate to this Bitcoin address if you find this PoC helpful: 12WN3fHmr5EB2Y5cDbKAgTDYMo5d1b1AUu alt text...