CVE-2017-7529

Nginx Integer Overflow Vulnerability CVE-2017-7529 Vulnerability Information When using the nginx standard module, an attacker can obtain cache file header information in the response by sending a header request containing a maliciously crafted range field. In certain configurations, the cache fi...

RedbloodC2

Public version of Redblood C2 This is a simple command and control server to handle sessions and your victims installation $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage After install node.js and and all modules from npm execute: node...

DbgNexum

DbgNexum - Shellcode Injection DbgNexum is a Proof-of-Concept for injecting shellcode using the Windows Debugging API and Shared Memory File Mapping. It avoids writing and reading remote memory directly, instead using context manipulation to force the target process to load and execute the payloa...

CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

ConnectWise ScreenConnect: Authentication Bypass Introduction This project aims to exploit an authentication bypass vulnerability in ConnectWise ScreenConnect. It provides a script to demonstrate the exploit. Please ensure you have the necessary permissions before attempting to use this script...

HTB-Pterodactyl-RCE-CVE-2025-49132

Pterodactyl Panel Locale RCE CVE-2025-49132 — Educational PoC -6f42c1 For authorized testing and defensive learning only. This repository is intended for controlled lab environments e.g., CTF/HTB-style setups where you own the target or haveexplicit written permission to test it. Context This...

CVE-2022-46169_unauth_remote_code_execution

CVE-2022-46169 - Unauthenticated Remote Code Execution Cacti Unauthenticated Remote Code Execution through authentication bypass and command injection in Cacti 1.2.23 and 1.3.0 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems...

CVE-2024-55963

CVE‑2024‑55963 Appsmith RCE PoC PoC exploit for CVE‑2024‑55963 that runs arbitrary commands or spawns reverse shell on vulnerable Appsmith instances. It automatically handles both modern servers with the environmentId feature and much older “legacy” builds that pre‑date it, so you can use one...

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

CVE-2017-7494

CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...

Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh This script checks for CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434. Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows...

CVE-2024-21626

CVE-2024-21626 POC Requirements runc 1.1.0 /proc/self/cwd/../../../bin/bash.copy & /dev/tc...

CVE-2025-25198-PoC

CVE-2025-25198-PoC Proof-of-concept for CVE-2025-25198, a Host header poisoning issue affecting Mailcow password reset flows. The script starts a local HTTPS listener on port 443, obtains a valid CSRF token automatically, sends the password reset sequence with a poisoned Host header, and stops wh...

Cryptolocker

DISCLAIMER : OUR TOOLS ARE FOR EDUCATIONAL PURPOSES ONLY. DON'T USE THEM FOR ILLEGAL ACTIVITIES. YOU ARE THE ONLY RESPONSABLE FOR YOUR ACTIONS! OUR TOOLS ARE OPEN SOURCE WITH NO WARRANTY AND AS ARE. Cryptolocker Crypto is open source Crypto-Locker. Crypto is developed in Visual C++. It has featur...

CVE-2020-1938

CVE-2020-1938 Detection Rules CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo"; content:"javax|2e|servlet|2e|include|2e|servletpath";...

ktor-cve-2023-45612-poc

Ktor XXE Vulnerability Proof-of-Concept CVE-2023-45612 Summary Impact: Arbitrary files access via a crafted XML DTD with an XXE reference. Root cause: Unsafe XML document parser. This repo contains a vulnerable Ktor 2.3.4 app configured to allow external entities so the XXE effect is visible...

CVE-2022-30114

Fastweb FastGate 'cmproxy' buffer overflow CVE-2022-30114 Introduction This script is a Proof of Concept PoC of CVE-2022-30114 and causes a reboot of Fastweb FastGate home routers, both GPON and VDSL2 version. CVE-2022-30114 is a heap-based buffer overflow in the 'cmproxy' executable, a program...

CVE-2021-26855-PoC

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. CVE-2021-26855 ssrf simple use of golang exercises Affected version Exchange Server 2013 is less than CU23 Exchange Server 2016 is less than CU18 Exchange Server 2019 is less than...

CVE-2013-1081

This script takes advantage of a local file inclusion lfi tht exists in the Novell zenworks mobile device management. Metasploit Modules - msf use auxiliary/scanner/http/novellmdmcreds msf auxiliarynovellmdmcreds show options Module options auxiliary/scanner/http/novellmdmcreds: Name Current...

CVE-2021-41773

CVE-2021-41773 A Zeek package which raises notices for Path Traversal/RCE in Apache HTTP Server 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013 References https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-41773 https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-42013...

ez-iRZ

ez-iRZ Exploit for CVE-2022-27226 Cross Site Request Forgery to Remote Code Execution in iRZ Mobile Routers Credits John Jackson Chris Mack --- https://github.com/0xHalcyon Stephen Chavez --- https://github.com/redragonx/ Robert Willis Description A CSRF issue on iRZ Mobile Routers through...