CVE-2025-30208

CVE-2025-30208 POC CVE-2025-30208 pip install -r requirements.txt Features: -u specify url scan -r specify txt file scan...

CVE-2018-20250-poc-winrar

CVE-2018-20250-poc-winrar...

CVE2PoC

CVE2PoC CVE2PoC is a tool that helps penetration testers, bug hunters, and security researchers quickly find public exploits, Proof-of-Concepts PoCs, and advisories related to a CVE ID. Table of Contents Features Installation Usage Public Exploits Finding Report Generation CVE Description...

CVE-2015-6576

CVE-2015-6576 A PoC for the Bamboo deserialization exploit...

dheat_dos_attack_poc

DHeat DoS Attack POC CVE-2002-20001 POC for Testing the Existence of DHEat DOS Attack for CVE-2002-20001 in SSH Service Usage command: python3 dheatdosattackpoc.py : Replace with the actual IP address or hostname of the SSH server you have permission to test. : Target Port number running SSH...

CVE-2017-8570

来源：https://www.exploit-db.com/exploits/44263/ 使用方法：python packagercompositemoniker.py -s calc.sct -o example.rtf What? This repo contains a Proof of Concept exploit for CVE-2017-8570, a.k.a the "Composite Moniker" vulnerability. This demonstrates using the Packager.dll trick to drop an sct file...

CVE-2025-8671

CVE-2025-8671 - PoC DoS lighttpd HTTP/2 Author : @abiyeenzo ⚠️ Warning This project is provided for educational purposes only. Running the PoC against third-party servers may constitute an illegal cyberattack and lead to criminal prosecution. Only use this script on your test environments or local...

Testability-CVE-2014-1266

TestableSecurity This is a small proof-of-concept that lifts out the vulnerable SSLVerifySignedServerKeyExchange from Apple's libsecurityssl to demonstrate that the signing code is readily unit testable in isolation. While there's been some talk that this bug wasn't easily tested, the code in...

DSCourier

DSCourier Description DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries. A separate blog post provides the full technical deep dive into the technique. DSCourier was built primarily from a research topic and...

GenEtherExploit

EN GenEtherExploit is a Proof-of-Concept PoC exploit for the macOS vulnerability CVE-2023-40404. This PoC leverages IOKit APIs to interact with the IOUserEthernetResource network service, manipulating the system's network interfaces. The purpose of this exploit is to demonstrate a potential kerne...

CVE-2021-44228-demo

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Source code based on: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Install Python 3.8 + pip install requests Windows 10 OS, Linux Ubuntu Used python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80 --check...

CVE-2020-8515-PoC

CVE-2020-8515-PoC CVE-2020-8515-PoC...

apache-tomcat-log4j

Log4j2 CVE-2021-44228 Vulnerability POC in Apache Tomcat Preview Setup Start tomcat server git clone cd apache-tomcat-10.0.14/bin startup.bat Serve the exploit class cd exploit py -m http.server 8888 cd exploit java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer...

PoCs-Weblogic_2017_10271

PoCs-Weblogic201710271 Simplified PoC for Weblogic-CVE-2017-10271...

dheater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. For further information about the attack visit the project page or read the full technical paper on IEEE Access. Disclaimer DHEater is a proof-of-concept denial-of-service tool intended only for defensive...

CVE-2015-1805

CVE-2015-1805 poc...

CVE-2022-22965

👾 CVE-2022-22965 This is a proof of concept of an exploit for CVE-2022-22965 spring4shell vulnerability. It is composed by: A vulnerable Springboot application; An exploit script written in python; A safe app for test that the exploit doesn't work; A dockerfile for running the vulnerable...

l4s_poc

l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a personal project that runs a simple POC that will host an LDAP server and an HTTP server for the Log4Shell exploit. Server The runservers.py will setup a stripped down meterpreter client that will call back to the Metasploit instance pass...

CVE-2018-10933

This tool provides the ability to scan and exploit server running vulnerable versions of libssh. vulnerability: https://www.libssh.org/security/advisories/CVE-2018-10933.txt fix: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/ this tool is meant to be used on...