CVE-2026-102822

The russh Rust SSH client and server library is vulnerable to a slice-index-out-of-range panic in versions prior to 0.63.1 . The root cause is a flaw in the selection logic where a connection configured to permit mac=none can incorrectly negotiate a MAC-requiring CTR or CBC block cipher. An attac...

-Exploit-CVE-2017-7529

-Exploit-CVE-2017-7529 CVE-2017-7529: Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request. Usage python3 cve-2017-7529.py...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

PENTEST-LAB

PENTEST-LAB A modern vulnerable application & cyber range for learning web, API, cloud, AI, and blue-team security through hands-on attack chains. ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║ ██╔══██╗██╔════╝███...

apache__dubbo_CVE-2021-30180_2-7-9

Apache Dubbo Project Apache Dubbo is a high-performance, Java-based open-source RPC framework. Please visit official site for quick start and documentations, as well as the wiki for news, FAQ, and release notes. We are now collecting Dubbo user info to help us to improve Dubbo further. Kindly...

CVE-2026-46242

CVE-2026-46242 full poc and lpe Kernel Range Status Notes 5.15.209 - 5.16 Affected Backported introducing commit 6.1.175 - 6.2 Affected Backported introducing commit 6.4 - 6.18.32 Affected Bug introduced in mainline 6.4 6.19 - 7.0.9 Affected Includes latest stable v6.1-based Pixel 8, older NOT...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

exim.exp

Simple exploit for vuln in exim 4.87 - 4.91 inclusive...

cve-2023-50164

CVE-2023-50164 Vulnerable versions Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 Versions where the vulnerability is fixed Struts 2.5.33 Struts 6.3.0.2 Search Script Windows/PowerShell For PowerShell 5.1 and newer. Written by Kjetil Sigvartsen at Norsk...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

CVE-2017-7529

CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a una vulnerabilidad de desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la fuga de información potencialmente sensible provocada por una solicitud especialmente...

cPanelScanner

🔍 Escáner de cPanel Una herramienta rápida y multihilo de detección de cPanel escrita en Go. Escanea direcciones IP, rangos CIDR o listas de objetivos desde un archivo para identificar servicios cPanel ejecutándose en los puertos 2082, 2083 y 2087. ✨ Características Escaneo multihilo — concurrenc...

MS15-034

MS15-034 MS15-034 POC "The current IIS server version is a vulnerable version with a known vulnerability CVE-2015-1635, MS15-034. Exploiting this vulnerability poses a risk of remote code execution or causing a blue screen of death. Test command: wget --header=""Range:...

CVE-2017-7529

Nginx Integer Overflow Vulnerability CVE-2017-7529 Vulnerability Information When using the nginx standard module, an attacker can obtain cache file header information in the response by sending a header request containing a maliciously crafted range field. In certain configurations, the cache fi...

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

sslScrape

sslScrape SSLScrape | Una herramienta de escaneo para extraer nombres de host de certificados SSL. Escrito por Peter Kim y @bbuerhaus . / ///| | // \ \ | | / \ / \ / / | | / \ | | // | | / / / /| / / | // / / / / / /|| / Uso | python sslScrape.py CIDR Range Ej. | python sslScrape.py 10.100.100.0/...

CVE-2026-16723

CVE-2026-16723 Exploit A standalone C++17 implementation for CVE-2026-16723 , a critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83. Requirements Linux or WSL on Windows C++17 compatible compiler GCC 7+ or Clang 5+ CMake 3.10 or newer System packages: libzip-dev zlib1g-dev Debian /...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Masscanner for Laravel phpunit RCE CVE-2017-9841 deps python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help show this help message and exit...

robodroid

RoboDroid RoboDroid is a cutting-edge software tool designed to simplify the process of managing and very soon also deploying Android machines for usage in Cyber Range environments. With RoboDroid, users can easily set up and customize pre-defined behaviors for their Android machines, allowing th...