CVE-2025-4517-POC-Sudoers

CVE-2025-4517 - POC adding user to sudoers This script is a weaponized version of the research published in the Google Security Research Advisory: https://github.com/google/security-research/security/advisories/GHSA-hgqp-3mmf-7h8f While the original research demonstrates the vulnerability by...

AtomicTestHarnesses

AtomicTestHarnesses AtomicTestHarnesses is a library that simulates and validates attack technique execution. It consists of a Powershell module for running attack techniques on Windows and also a Python package for running on macOS and Linux The details of a technique can vary from attack to...

cve-2019-7609

CVE-2019-7609 Exploit for CVE-2019-7609 written in python3.6+ based on the code by LandGrey. CVE-2019-7609 : RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer. Usage 1. Start a listener 2. Run the exploit with the target url base url of the kiba server, the listener host...

twittor

Twittor A stealthy Python based backdoor that uses Twitter Direct Messages as a command and control server This project has been inspired by Gcat which does the same but using a Gmail account. Setup For this to work you need: A Twitter account Use a dedicated account! Do not use your personal one...

CVE-2022-21371

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram API to receive...

Joomla-CVE-2023-23752

Joomla-CVE-2023-23752 This Python implementation serves an educational purpose by illustrating the exploitation of CVE-2023-23752. The code offers insight into how the vulnerability can be exploited. Table of Contents About Installation Usage Contributing Vulnerable Environment Deployment Credits...

BlackMamba

BlackMamba Command and Control What's BlackMamba? Black Mamba is a Command and Control C2 that works with multiple connections at same time. It was developed with Python and with Qt Framework and have multiples features for a post-exploitation step. Some Features Multiple clients. Real-time...

LaZagneForensic

The LaZagne Project !!! Description The LaZagne project is back !!! LaZagne uses an internal Windows function called CryptUnprotectData to decrypt user passwords. This API should be called on the victim user session, otherwise, it does not work. If the computer has not been started when the...

Kcfinder-Mass-Scanner

Kcfinder-Mass-Scanner Python 2.7 How To Use? Install Python 2.7 Download Here python file.py...

CVE-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045 Hi! I refactored the original script to use requests library, the other libraries were causing some errors to me. Hope it helps! Usage: python3 cve-2017-5638 url cmd-command...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Command Injection via Git URL in CI/CD Pipeline Program Code Python cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone repourl /tmp/repo"...

behat-config-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install behat-config-leaks Run bellow command to check behat-config-leaks -h Configurations 2. We integrated with the Telegram API to...

CVE-2022-21500

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21500 Run bellow command to check CVE-2022-21500 -h Configurations 2. We integrated with the Telegram API to receive...

hephaestus-server-forger

Server security auditor for Apache, Nginx & IIS — 13 scan phases, 70+ finding codes, AI-powered hardening guides. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · Apache 2.4.54 · 11 findings · 44.17s · scan 518 · safe mode !Hephaestus — HTML re...

CVE-2017-8570

CVE-2017-8570Exp.py Reference:https://github.com/rxwx/CVE-2017-8570 Changes: Usage: python2 CVE-2017-8570Exp.py -s write.sct -e write.exe -o write.rtf + RTF file written to: write.rtf...

CVE-2019-0230-PoC

CVE-2019-0230 CVE-2019-0230 Exploit This is CVE-2019-0230 Exploit : usage python3 cve-2019-230.py example: python3 cve-2019-0230-poc.py pentest.com whoami Testing pentest.com! Command being passed for RCE: whoami 2020/10/22/...

CVE-2022-45729

This repository does not have a README...

CVE-2025-4138-POC

CVE-2025-4138 - Python tarfile PATHMAX Bypass PoC Author: d3vn0mi / \ \ / / | | / \ | | | | || | / | | \ V /| | | | | | | \ | | || || / \ | | | | | ||/ /| || / / || | , | | || || ||/|/ |||/ // CVE-2025-4138 :: Python tarfile PATHMAX Bypass Author: d3vn0mi Overview A proof-of-concept exploit...

CVE-2017-7269

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2017-7269 Run bellow command to check CVE-2017-7269 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2020-3452

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2020-3452 Run bellow command to check CVE-2020-3452 -h Configurations 2. We integrated with the Telegram API to receive...