GTRS

GTRS - Google Translator Reverse Shell This tools uses Google Translator as a proxy to send arbitrary commands to an infected machine. INFECTED MACHINE ==HTTPS== GOOGLE TRANSLATE ==HTTP== C2 Environment Configuration First you need a VPS and a domain, for the domain you can get a free one on...

CVE-2024-5764

CVE-2024-5764 This repository contains a Python script capable of exploiting CVE-2024-5764 by decrypting encrypted data with the static encryption key. Sonatype announcement available here. Usage usage: cve-2024-5764.py -h -e ENCRYPTEDPAYLOAD -p PASSPHRASE Decrypt data encrypted by the Java...

dfir-orc

DFIR ORC !LGPL licensedimg-license French Cybersecurity Agency ANSSI This project is managed byANSSI. To find out more, you can visit the page in French dedicated to ANSSI’s open-source strategy. You can also click on the badges above to learn more about their meaning. Documentation...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...

CVE-2021-41773

CVE-2021-41773 A Zeek package which raises notices for Path Traversal/RCE in Apache HTTP Server 2.4.49 CVE-2021-41773 and 2.4.50 CVE-2021-42013 References https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-41773 https://httpd.apache.org/security/vulnerabilities24.htmlCVE-2021-42013...

CVE-2022-31061

CVE-2022-31061 PoC for GLPI CVE-2022-31061 A Proof of Concept for GLPI = 9.3.0 and 10.0.2 - Unauthenticated SQL injection on login page Legal disclaimer : Use of this script for attacking à target without mutual consent is illegal. It's is the end user responsibility to obey all applicables laws...

CVE-2023-27350-POC

CVE-2023-27350-POC A python script tht searches for vulnerable version of PaperCut MF/NG More information can be found here: https://www.huntress.com/blog/critical-vulnerabilities-in-papercut-print-management-software Note: This was created for educational use only. Use at your own risk...

CVE-2024-47051

Summary Bad sanitization of uploaded file's content, type and extension in the Asset Edition feature allows an authenticated attacker to write arbitrary PHP code inside the web directory and locate where said file is written. This results in Remote Code Execution. A path traversal also allows to...

CVE-2020-0796-DoS

CVE-2020-0796 DoS PoC SMBGhost A simple demonstration exploiting CVE-2020-0796. This script will induce a BSoD in vulnerable machines. Pure Python 3 with no additional dependencies required. Usage python CVE-2020-0796-DoS.py Credit Hard-coded packet data was derived from this PoC script by maxpl0...

CVE-2026-31431-cleaned

copyFail.py — CVE Exploit Analysis Report Summary copyFail.py is a proof-of-concept PoC exploit that demonstrates a local privilege escalation vulnerability in the Linux kernel. By abusing the splice system call in combination with crafted socket options, the exploit gains the ability to corrupt...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 - Verification and Mitigation Script This repository documents a Bash script used to assess exposure to CVE-2026-31431 on Linux hosts, with a focus on Ubuntu, and to apply a simple mitigation by blocking the algifaead module. Language versions: English: README.md Portuguese:...

CVE-2022-3602

Detection for CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6 Detects when the HTTP Server header indicates that the version of OpenSSL is vulnerable to CVE-2022-3602 ie. v3.0.0 to v3.0.6 inclusive. Detects exploitation attempts in TLS v1.2. References:...

MassBleed

MassBleed SSL Vulnerability Scanner USAGE: sh massbleed.sh CIDR|IP single|port|subnet port proxy ABOUT: This script has four main functions with the ability to proxy all connections: To mass scan any CIDR range for OpenSSL vulnerabilities via port 443/tcp https example: sh massbleed.sh...

rpef

Router Post-Exploitation Framework Currently, the framework includes a number of firmware image modules: 'Verified' - This module is confirmed to work and is stable. 'Unverified' - This module is believed to work or should work with little additional effort, but awaits being tested on a physical...

CVE-2026-34070

I Found a Path Traversal Bug in LangChain That Could Leak Your Cloud Credentials How a forgotten legacy API in one of AI's most popular frameworks quietly exposed millions of applications to arbitrary file reads. There's a certain feeling you get when a proof-of-concept works on the first try. No...

kali-arm

Kali-ARM Build-Scripts Kali Linux ARM build-scripts. These are the same build scripts that we use to generate the pre-generated official Kali Linux ARM images, found here: https://www.kali.org/get-kali/ There are additional scripts included in this repository, supporting more devices, but these...

MOVEit-Exploit

MOVEit Exploit an exploit of POC for CVE-2023-34362 affecting MOVEit Transfer Note this project is done... Our instagram page . Our youtube chanel . Our twitter page CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Disclaimer This software has been created purely for the purposes o...

-CVE-2021-44790

CVE-2021-44790 Description of CVE-2021-44790 CVE-2021-44790 describes a system-level security vulnerability in the modlua of the Apache HTTP Server, specifically in version 2.4.51 and earlier versions. This vulnerability is triggered when the r:parsebody function improperly handles HTTP...

CVE-2024-3094_xz_check

CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. 📖 Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚡ 30x...