pycdc-studio

pycdc-studio 中文说明 A Qt Widgets desktop UI for exploring Python bytecode with pycdc / pycdas, inspecting native decompilation results, importing Pyarmor oneshot output, and retrying unsupported code objects with AI fallback. The app supports both Windows and Linux desktop environments. Screenshots...

CVE-2025-31324_PoC

CVE-2025-31324PoC Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader This script performs: 1. File upload to the vulnerable endpoint via Upload host/port 2. Optional trigger via HTTP GET via Trigger host/port 3. Basic response...

CrazyToolBox

CrazyToolBox Table of contents 📢 What is CrazyToolBox? ⚙️ Execution ⭐ Current features 📢 What is CrazyToolBox? CrazyToolBox is a collection of usefult tools relative to Web3. These tools can be accessed through a GUI using the CrazyToolBox application. We will be adding new tools to the...

VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972

VMwarevCenterUNAuthorizedRCECVE-2021-21972 zoomeye dork: app:"VMware vCenter" A harmless detection script written using pocsuite3 VMwarevCenterUNAuthorizedRCE.py, using nearly a year of data for detection: Success rate approximately: 1551 / 3998 = 39%...

Lucky-Spark

LUCKY-SPARK ⟪ LUCKY-SPARK ⟫ is a stager designed for shellcode payloads staged with http/https like sliver or on github raw. It uses modern obfuscation and evaion methods like sliding window just-in-time decryption of the payload and cpu instruction patching. By default it creates an executable...

CVE-2022-28368-handler

CVE-2022-28368-handler This repository contains a python script that will handle the majority of the dompdf cached font exploit CVE-2022-28368, all you need to do is create the request. It will even provide a trigger string to start the exploit : Usage usage: CVE-2022-28368.py -h -d DOMPDFLOCATIO...

pastenum

Pastenum Pastenum is a text dump enumeration tool. It is designed to help find and enumerate datadumps, and doxs posted on public sites. It currently searches sites github.com, gist.github.com, pastebin.com, pastee.org, and pastie.org. Pastenum is a gem rewrite of nullthreat's original pastenum2...

DblTekGoIPPwn

DblTekGoIPPwn Tool to exploit challenge response system in vulnerable DblTek GoIP devices. Can generate responses to specified challenges, test hosts for the vulnerability, run commands on vulnerable hosts, send SMS messages from a host, and drop into a root shell on any vulnerable host. The...

CVE-2023-4911-PoC

GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911 Overview The GNU C Library glibc serves as the C library in the GNU system and is integral to Linux-based systems. At its core, glibc defines essential functionalities for programs, including system calls and common functions like open,...

CVE-2025-6934

🛡️ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opal Estate Pro 📝 Description The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme , is vulnerable to Privilege Escalation in all versions up to and...

OracleOTM

OracleOTM Python tool for exploiting CVE-2021-35616 The script works in modules, which I implemented in the following order: ► Username enumeration ► Search for default credentials ► Run an SQL query using DBXML servlet ► Full exploitation and JSP execution The syntax of the script is as follows:...

CVE-2022-25012

Argus Surveillance DVR 4.0 - Weak Password Encryption CVE-2022-25012 Updated version of this weak password encryption script Exploit DB REF: https://www.exploit-db.com/exploits/50130 Author REF: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST REF:...

node-cve-2018-4407

node-cve-2018-4407 Node.js PoC exploit code for CVE-2018-4407 Author: Sam Decrock This script is based on the scapy script provided by Zuk: iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC in a tweet: pip install scapy sudo scapy sendIPdst=“Target...

dicerosbicornis

DicerosBicornis A stealthy Python based Windows backdoor that uses email as a command and control server. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module pypiwin32 module Features Encrypted transportation messages AES + SHA256 hashing Generate computer unique id...

CVE-2023-42819

CVE-2023-42819 CVE-2023-42819 Vulnerability Description JumpServer Arbitrary File Write Vulnerability CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. Place the script and required files in the same directory 2. Ensure Google Chrome is installed, and obtain its version number reg query...

CVE-2024-29988-exploit

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

CVE-2024-7928

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. Overview This is a bulk scanning and exploitation tool for CVE-2024-7928: FastAdmin up to 1.3.3.20220121 allows unauthenticated attackers to execute a directory traversal. This tool is based on this...

Findsploit

Findsploit by @xer0dayz https://sn1persecurity.com ABOUT Finsploit is a simple bash script to quickly and easily search both local and online exploit databases. This repository also includes "copysploit" to copy any exploit-db exploit to the current directory and "compilesploit" to automatically...

CVE-2023-49052

CVE-2023-49052 - Microweber CMS v2.0.4 - Uploading Malicious Files Description In version 2.0.4 of Microweber CMS where the file upload option is active in created forms, it is possible to send malicious HTML files, even when certain types of validations are applied in this field. This...