React2Shell_Hunter

React2Shell Hunter AWS Organization-Wide Detection Toolkit for CVE-2025-55182 & CVE-2025-66478 ⚠️ IMPORTANT DISCLAIMER - PLEASE READ BEFORE USE This toolkit has NOT been tested in a production AWS environment. Due to infrastructure constraints, this project was developed and validated through code...

Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shell

Deep-Technical-Report-CVE-2026-109618-CVE-2026-109619-PHP2Shel...

react2shell-rce-autobot

🔍 React2Shell Dork Scanner 🚨 Tentang Kerentanan React2Shell adalah kerentanan Remote Code Execution RCE kritikal yang mempengaruhi: Target| Versi Vulnerable ---|--- ⚛️ react-server-dom-webpack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️ react-server-dom-turbopack| 19.0.0, 19.1.0, 19.1.1, 19.2.0 ⚛️...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-exp PoC and RCE derived from the PHP official patch...

CVE-2024-21532-PoC-ggit

CVE-2024-21532 Command Injection vulnerability in ggit ggit describes itself as: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on this vulnerability:...

CVE-2025-24813

CVE-2025-24813 Description This repo aims to provide clear instructions for rapid deployment of Tomcat v9.0.90 with java 25.0.1 2025-10-21 LTS on Windows Server 2019 Standard for Cyber Security threat emulation exercise. The exploit.py leverages on ysoserial-all.jar to create a payload using...

PacketPirate

PacketPirate A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems. It operates similarly to industry-standard GUI proxies but is optimized for automation environments, headless operation, and integration wi...

cve-2018-15473

CVE-2018-15473: OpenSSH Username Enumeration OpenSSH through 7.7 allows remote attackers to enumerate valid usernames by sending malformed authentication requests and observing differential server responses. Details Field| Value ---|--- Affected Software| OpenSSH 2.3 through 7.7 CVSS v3.1| 5.3...

evillcode

🔥 Evillcode - Modular MITM Framework Modular cybersecurity framework developed in Python for analysis, monitoring, and simulation of MITM attacks in local networks. It allows students and professionals to understand the inner workings of networks, protocols, and vulnerabilities in controlled...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

cve-id Donate Help maintain this project...

dbdtct

dbgdtct Desctiption dbgdtct is a Python-based tool designed to help you detect if a web application is deployed in debug mode—a critical misconfiguration that can expose sensitive information and increase the risk of exploitation in production environments. Installation git clone...

CVE-2015-1328

CVE-2015-1328 Proof of Concept A Proof of Concept PoC exploit for CVE-2015-1328, a privilege escalation vulnerability affecting the Linux kernel's overlayfs implementation. This vulnerability allows local unprivileged users to gain root access by exploiting improper permission checks in overlayfs...

remote-method-guesser

Remote Method Guesser remote-method-guesser rmg is a Java RMI vulnerability scanner and can be used to identify and verify common security vulnerabilities on Java RMI endpoints. remote-method-guesser was presented at Black Hat USA2021 within the Arsenal sessions. The recording of the session and...

CVE-2026-3854-PoC

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injection For educational and authorized security research purposes only. Do not use against any system without explicit written permission. Overview CVE-2026-3854 is a Remote Code Execution vulnerability in GitHub Enterprise Server's and...

php-exploit_cve-2022-31630

CVE-2022-31630 – Proof of Concept Exploit Warning: This code is made only for educational purposes and testing in an isolated laboratory environment. Use on other systems without permission is illegal and irresponsible. 📌 Description CVE-2022-31630 is an Out-of-Bounds OOB Read vulnerability in th...

IngressNightterror

IngressNightterror CVE-2025-1974 Overview This repository is my research on IngressNightmare vulnerability. It includes a vulnerable Ingress deploy files, exploit itself and shared object payload. CVE The list of CVE indexes: CVE-2025-1974 - Root vulnerability CVE-2025-24514 - auth-url annotation...

POC_SQL_injection_in_Parse_Server_prior_6.5.7_-_7.1.0

Database Ghost 🔥 Advanced PostgreSQL SQL Injection Exploitation Tool 🚨 DISCLAIMER FOR AUTHORIZED SECURITY TESTING ONLY Unauthorized use is illegal. Use only on systems you own or have explicit permission to test. ⚡ QUICK START Install & Run git clone...

paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit Installation • Usage • Running Paint2Die Installation Instructions git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Usage ./paint2die -h...

CVE-2025-24071

CVE-2025-24071 - Windows File Explorer NTLM Hash Leak 📋 Overview CVE-2025-24071 is a vulnerability in Windows File Explorer that allows unauthorized disclosure of NTLM hashes. When a user extracts a specially crafted .zip archive containing a malicious .library-ms file, Windows Explorer...

external_curl_AOSP10_r33_CVE-2021-22924

| | | | | | / | | | | | | | | | || | | | |/|| \| README Curl is a command line tool for transferring data specified with URL syntax. Find out how to use curl by reading the curl.1 man page or the MANUAL document. Find out how to install Curl by reading the INSTALL document. libcurl is the...