mtkclient

Language: 🇺🇸 🇨🇳 MTKClient Just some mtk tool for exploitation, reading/writing flash and doing crazy stuff. For windows, you need to install the stock mtk port and the usbdk driver see instructions below. For linux, a patched kernel is only needed when using old kamakiri see Setup folder except for...

CVE-2023-20887

CVE-2023-20887 POC for CVE-2023-20887 VMWare Aria Operations for Networks vRealize Network Insight unauthenticated RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://kushagraojha.medium.com/vmware-vrealize-network-insight-cve-2023-20887-193f3c3d30a0...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

CVE-2023-22809

CVE-2023-22809 Ref: https://vulners.com/cve/CVE-2023-22809 Exploit Title: sudo 1.8.0 - 1.9.12p1 - Privilege Escalation Exploit Author: n3m1.sys CVE: CVE-2023-22809 Date: 2023/01/21 Vendor Homepage: https://www.sudo.ws/ Software Link: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz Version: 1.8.0 to...

dirtyCow

Dirtycow also known as CVE-2016-5195 and it's very populer vulnerability of past time. First of all choose the fitted Linux version for that vulnerability. then install or run it on VBOX or VMWare . after install it follow those instructions. 1. Create a user without having root access. 2. Log in...

zen-desktop

Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...

CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner is a Bash Script-based tool for performing detection reconnaissance and active verification active exploitation check of the Authentication Bypass vulnerability in the telnetd service of the GNU Inetutils package...

Kioptrix-Level1-Vulnerability-Analysis

Kioptrix Level 1: Full-Spectrum Vulnerability Audit & Exploitation 🏛️ Professional Objective The objective was to perform a structured penetration test on the Kioptrix Level 1 environment to achieve full 'root' compromise and document technical remediation strategies suitable for both Red and Blue...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...

CVE-2018-11510

A couple exploits for CVE-2018-11510 by Kyle Lovett @SquirrelBuddha and myself Matthew Fulton/@haqur. Leverages an unauthneticated command injection to get a root shell back. The metasploit module has a separate payload included in the repo. Will see if I can get them included via a pull request...

UserLAnd

Welcome to UserLAnd The easiest way to run a Linux distribution or application on Android. Features: Run full linux distros or specific applications on top of Android. Install and uninstall like a regular app. No root required. Have a bug report or a feature request? You can see our templates by...

cPanel-WHM-AuthBypass-Session-Checker

CVE-2026-41940 Session Validation Tool A companion tool for the watchTowr CVE-2026-41940 authentication bypass exploit. After running the main exploit against a cPanel/WHM target, this script validates whether the injected session actually grants authenticated access by testing multiple endpoints...

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 bytes from 8.8.8.8: icmpseq=1...

CVE-2024-22274-RCE

CVE-2024-22274 Exploit This repository contains an exploit for CVE-2024-22274. The exploit creates a new user on a remote machine via SSH and then provides a root shell. Requirements Go Golang installed on your machine. You can download it from here. A remote machine with SSH access. Compilation ...

CVE-2023-22809-sudoedit-privesc

CVE-2023-22809 sudo Privilege escalation Affected sudo versions: 1.8.0 to 1.9.12p1 This script automates the exploitation of the CVE-2023-22809 vulnerability to gain a root shell. The script checks if the current user has access to run the sudoedit or sudo -e command for some file with root...

PYSEC-2026-4321 uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

By default, uv verifies TLS connections against a vendored copy of the webpki-root-certs bundle. Versions before 0.13.4 include the emSign ECC Root CA - G3 root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Proof of Concept PoC ⚠️ DISCLAIMER: EDUCATIONAL PURPOSES ONLY ⚠️ This repository contains a Proof-of-Concept PoC exploit for CVE-2026-24061. It is intended strictly for educational purposes and for testing systems in a controlled lab environment. The author takes no responsibility...

PYSEC-2026-4320 certifi bundles emSign root CAs with compromised intermediate CA keys

Certifi versions before 2026.10.18 include the emSign ECC Root CA - G3 root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue...

CVE-2017-15944-POC

CVE-2017-15944-POC POC For CVE-2017-15944 Palo Alto Networks firewalls remote root code execution Usage python panos-poc.py https://panip...

docker-socket-risk-demos

docker-socket-risk-demos Companion repo for the video: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI This repo contains the sample web app and Claude Code prompt used in the video to demonstrate: 1. W...