20611 matches found
CVE-2023-40931-POC
CVE-2023-40931 Proof of Concept PoC šØ This repository contains a Proof of Concept PoC for CVE-2023-40931, a security vulnerability identified in affected software/system. The purpose of this repository is to demonstrate the vulnerability for educational and research purposes only. š ļø Disclaimer ā ļø...
JavaDeserialization
Java Deserialization Vulnerability Scanner A Java deserialization vulnerability scanner for vulnerabilities similar to CVE-2017-10271. This project currently contains only one PoC; others have not been organized yet. Installation 1. Install nmap ā https://nmap.org/download.html Download the...
acceleratortroll
AcceleratorTroll⢠Abusing CVE-2023-28206 to make something useful. Roadmap Right now, we are still trying to understand how the vulnerability works and how to exploit it for anything other than panics. Prove that the vulnerability can be used to obtain kernel privileges. Obtain a krw exploit. Run...
csaf
The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...
CVE-2021-41773-PoC
CVE-2021-41773-PoC PoC for CVE-2021-41773 with docker to demonstrate Run Just run ./poc.sh. Make sure you have working docker and docker-compose $ ./poc.sh Creating network "cve-2021-41773-pocdefault" with the default driver Creating cve-2021-41773-pocweb1 ... done root:x:0:0:root:/root:/bin/bash...
anubis-fetch
anubis-fetch $ nix run github:fzakaria/anubis-fetch -- --text https://lore.kernel.org/ A Go CLI for fetching URLs behind Anubis proof-of-work challenges. It solves legacy SHA-256 and WASM challenges in-process, with headless Chromium as a fallback. Sites such as lore.kernel.org and kernel.org use...
CVE-2025-24893-RCE-PoC
Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Installation python3 -m pip install requirements.txt Usage Connecting python3 poc.py Example With debug set to False default python...
staged-DLL-Injection-SMB-
staged-DLL-Injection Staged DLL injection proof-of-concept built in C using Win32 APIs ā developed in an isolated lab environment for red team certification study CRTO. ā ļø Disclaimer: This project was developed strictly in an isolated lab environment for educational purposes as part of offensive...
CVE-2020-13151
CVE-2020-13151 POC Aerospike Database 5.1.0.3 Host Command Execution Full writeup @ https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html poc.lua shows manual exploitation of the server cve2020-13151.py for automated exploitation run-poc.sh sets up a docker...
cve-2019-0708
cve-2019-0708 POC CVE-2019-0708 with python script! Video POC: https://www.youtube.com/watch?v=XVmCtUMELdU...
CVE-2024-6387
CVE-2024-6387 This is an altered PoC for d0rb/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them...
CVE-2021-43267-POC
CVE-2021-43267-POC trusty poc Provide it to legitimate people...
log4j-shell-poc
log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository we have made and example...
CVE-2021-40539
CVE-2021-40539 POC...
MS16-051-poc
CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE 11. Write-up https://www.deamwork.com/archives/patch-analysis-of-cve-2016-0189.orz6 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2...
CVE-2024-24919
Checkpoint POC Exploit for testing purposes to retrieve sensitive files from Checkpoint based on this article: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ I am not responsible for any abuse of this script, the intention here is for defenders to test their own devices...
CVE-2025-24813-PoC-Apache-Tomcat-RCE
Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...
CVE-2021-44827
CVE-2021-44827 A PoC for CVE-2021-44827 - authenticated remote code execution in Tp-link Archer C20i Write-up: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html Example $ python exploit.py error0 error0 Run postexploitcmd Trying 192.168.0.1...
VMware_ESXI_OpenSLP_PoCs
VMwareESXIOpenSLPPoCs CVE-2020-3992 & CVE-2019-5544 Tested on ESXI installed on VMware Workstation. If on real mechine, you may need to change the srvtype field service:VMwareInfrastructure...
ImageTragick-CVE-2016-3714-RShell
ImageTragick-CVE-2016-3714-RShell These are CVE-2016-3714 mvg/svg POCs using bash, nc, php and other tools to build a reverse shell. Declaration For research and ethical hacking only... Usage 1. Server Side : nc -l - p port number 2. upload the pictures to vul sites Acknowledge Thankd...