CVE-2025-34028-PoC-Commvault-RCE

CVE-2025-34028 - Commvault Command Center Remote Code Execution A Python exploit for CVE-2025-34028, a remote code execution vulnerability in Commvault Command Center. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability...

CVE-2017-0213

CVE-2017-0213 I used the code provided by the Google Project Zero Team here: https://github.com/WindowsExploits/Exploits/tree/master/CVE-2017-0213 The changes I made allow the program to call a powershell oneliner that will give me an Empire agent on the target. I will use this for privilege...

CVE-2017-1000486

CVE-2017-1000486 This is a PoC of CVE-2017-1000486 with some payloads useful to bypass blacklisting lexicographic checks on standard functions used to achieve RCE getClass, exec, etc.. and for retrieving primefaces secret through Padding Oracle in order to be less noisy possible on exploitation...

awesome-wazuh

awesome-wazuh Curated list of Wazuh resources, tools, and integrations Wazuh is a free, open-source security monitoring platform for threat prevention, detection, and response. Contents Official Documentation Getting Started Setup Guides Deployment Docker Kubernetes Terraform / OpenTofu Ansible...

SPIP-CVE-2024-23659-

SPIP-CVE-2024-23659- Python 3 script for validation/exploitation of unauthenticated RCE in SPIP BigUp Description cve.py automates: 1. SPIP form discovery formulaireaction and formulaireactionargs. 2. Sending a multipart payload to execute commands on the target server. 3. Reading output via the...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

kraken

Kraken is a simple cross-platform Yara scanner that can be built for Windows, Mac, FreeBSD and Linux. It is primarily intended for incident response, research and ad-hoc detections not for endpoint protection. Following are the core features: Scan running executables and memory of running process...

SECURITY-3430

SECURITY-3430 Workaround This is a Java agent for use with Jenkins controllers that do not have the fix for SECURITY-3430 i.e., up to and including 2.470 and LTS 2.452.3. Mechanism and Compatibility It transforms the definition of the class containing the SECURITY-3430 vulnerability to prevent...

pulse-exploit

pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...

CVE-2026-3844

CVE-2026-3844 — WordPress Breeze Cache Unauthenticated File Upload Overview This repository contains a Python proof-of-concept PoC script for demonstrating an Unauthenticated Arbitrary File Upload vulnerability affecting the WordPress Breeze Cache plugin ⚠️ This project is intended strictly for...

Orwell-RAT-and-Botnet

Orwell - Cross Platform Botnet and RAT package. Orwell is a RAT and Botnet designed as a trio of programs. The bigbro.py, which is ran on a remote server and used to give commands and information to proles; the innerPart.py, used to send commands to BB that are given to the proles; and prole.py,...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

notRDP

notRDP A Havoc C2 plugin that creates an invisible alternate Windows desktop, streams it to a browser-based viewer, and supports full mouse/keyboard interaction like RDP, but invisible to the target user. How It Works 1. Creates a hidden desktop via CreateDesktopW and launches explorer.exe on it ...

frida-android-libbinder

frida-android-libbinder PoC Frida script to view Android libbinder traffic. The following links were a great source of inspiration and knowledge: https://www.blackhat.com/docs/eu-14/materials/eu-14-Artenstein-Man-In-The-Binder-He-Who-Controls-IPC-Controls-The-Droid.pdf...

AdGuardHome

Privacy protection center for you and your devices Free and open source, powerful network-wide ads & trackers blocking DNS server. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home is a network-wide software for blocking ads and tracking. After you set it up, it'll cover ALL your home...

CVE-2024-2389

Progress Kemp Flowmon CVE-2024-2389 Description This repository contains a Python script to exploit a vulnerability in Flowmon that allows for gaining a reverse shell on the target system. The exploit leverages a flaw in the service.pdfs/confluence endpoint to execute arbitrary commands on the...

CVE-2025-50754-PoC

CVE-2025-50754 Stored XSS to Remote Code Execution in a PHP-Based CMS Platform Summary A PHP-based CMS platform version 5 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" feature. When an administrator views a user-submitted report, malicious JavaScript is executed within...

CVE-2024-24919

Intro Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability Wrong Check Point; vulnerable to arbitrary file reading. Requirements Python 3 Pip Required Library/Module Install via PIP requests urllib3 tqdm How To Run PS C:\ python CVE-2024-24919.py list.txt...