MS17-010

MS17-010 MS17-010 CVE-2017-0143 - Python3 Script python3 exploit.py target...

CPLDCOMTrigger

CPLDCOMTrigger Description A Python script depends on Impacket scripts to trigger the loading of a .cpl file into memory using a DCOM object. The CPL file path must already be added to the registry. The script uses the Open function in the IOpenControlPanel interface to load the CPL Control Panel...

dnsenum

README - dnsenum.pl VERSION: 1.2.4 multithreaded perl script to enumerate DNS information of a domain and to discover non-contiguous ip blocks. OPERATIONS: 1 Get the host's addresse A record. 2 Get the namservers threaded. 3 Get the MX record threaded. 4 Perform axfr queries on nameservers and ge...

CVE-2022-31814

CVE-2022-31814 Reworked and optimized exploit script of pfBlockerNG 2.1.426 vulnerability Exploit Title: pfBlockerNG 2.1.426 - Remote Code Execution RCE Shodan Results: https://www.shodan.io/search?query=http.title%3A%22pfSense+-+Login%22+%22Server%3A+nginx%22+%22Set-Cookie%3A+PHPSESSID%3D%22 Dat...

CVE-2026-8461-EXP

CVE-2026-8461 "PixelSmash" — FFmpeg MagicYUV Heap OOB Write PoC !WARNING This repository contains a working exploit PoC for a heap corruption vulnerability. It is intended solely for authorized security research, CTF contexts, and defensive analysis. Do not use against systems you do not own or...

sdnpwn

What is sdnpwn? sdnpwn is a toolkit and framework for testing the security of Software-Defined Networks SDNs. For more information check out this article: https://sdnpwn.net/2017/08/22/what-is-sdnpwn/ Installation First download sdnpwn using git git clone https://github.com/smythtech/sdnpwn Make...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

CVE-2024-39304

Description This script is a PoC for CVE-2024-39304, where a SQLi is possible due to a lack of sanitization in the ChurchCRM project. Usage python3 CVE-2024-39304.py -u -p -b -v Example: python3 CVE-2024-39304.py -u FirstLast -p Password123 -b http://localhost/churchcrm -v Links...

CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC A concise Proof-of-Concept showing how CVE-2025-54100 can lead to Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. Table of Contents What is CVE-2025-54100? How the PoC Works Quick Start Triggering From a Victim...

sj

sj Swagger Jacker sj is a command line tool designed to assist with auditing of exposed Swagger/OpenAPI definition files by checking the associated API endpoints for weak authentication. It also provides command templates for manual vulnerability testing. It does this by parsing the definition fi...

physical-bitcoin-attacks

Known Physical Bitcoin Attacks A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace. NOTE: this list is not comprehensive; many attacks are not publicly reported. If you are aware of an attack that is not listed, please open an issue or pull request —...

CVE-2019-11447-EXP

CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability Before run the python script, run the nc command firstly. The default port is 1234. Then execute exploit.py, follow the tips and input required contents...

htbenum

htbenum A Linux enumeration script for Hack The Box This script is designed for use in situations where you do not have internet access on a Linux host and would like to run enumeration and exploit suggestion scripts, such as Hack The Box. I find myself running a similar set of scripts when I get...

awesome-canbus

Awesome CAN Bus 🚜 Awesome Tools, Hardware And Resources For CAN Bus This curated list helps a reverse engineering CAN bus devices with lightly specializing in automotive embedded controller software and communication understanding. Note Items marked as "🔝" are highly recommended. Permanent URL to...

CVE-2022-22536

CVE-2022-22536 SAP memory pipes desynchronization vulnerabilityMPI CVE-2022-22536. Description - POC for CVE-2022-22536: SAP memory pipesMPI desynchronization vulnerability. - create by antx at 2022-02-15. Detail SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP...

linux-exploit-suggester

LES: Linux privilege escalation auditing tool Quick download: wget https://raw.githubusercontent.com/mzet-/linux-exploit-suggester/master/linux-exploit-suggester.sh -O les.sh Details about LES usage and inner workings: https://blog.z-labs.eu/2019/05/10/les-paper.html Additional resources for the...

CVE-2022-0997

Fidelis Network and Deception - CVE-2022-0997 - Insecure File Permissions Privilege Escalation Releasability and Acknowledgements The exploit was approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approving the...

lunasec

LunaTrace LunaTrace is an Open Source supply chain security and auditing tool. At its heart is a web console the tracks your projects and their dependencies, looking for vulnerabilities and other issues. This console is provided as a SAAS available here for free or you can deploy it and manage it...

FruityWifi

FruityWiFi Wireless network auditing tool http://www.fruitywifi.com/ Important Note Debian 11 Bullseye: Please use Use Debian 11 Bullseye based systems. The Installer has been updated for resolving issues with old version. Note : Some modules will not work until they are upgraded to Python3...

CVE-2023-22518

CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has warned administrators about a critical vulnerability in Confluence. Exploitation of this vulnerability could lead to data loss, therefore the developer recommends you install the patch...