CVE-2024-38475

CVE-2024-38475 POC Credit : All credit to this guy: https://blog.orange.tw/ and https://x.com/orange8361 all i did was make a POC script from his research. Introduction : Improper escaping of output in modrewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesyste...

vcenter-log4j

VMware vCenter log4j workaround Script to workaround VMware vCenter log4j vulnerability CVE-2021-44228, as per the VMware KB article. 2021-12-13 02:09 UTC - Added Secure Token & Identity Management services 2021-12-13 12:46 UTC - Added PSC Client for 6.5 - see below VMware have released a python...

Collabfiltrator

Collabfiltrator Exfiltrate Blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator. Version: 4.0.1 Authors: Adam Logue Jared McLaren Frank Scarpella Ryan Griffin AI Authors: Claude 3.5 Sonnet ChatGPT 4o Requirements: Burp Suite Professional 2024.12.1 or Later Support:...

second-order

Second Order Scans web applications for second-order subdomain takeover by crawling the app, and collecting URLs and other data that match certain rules, or respond in a certain way. Installation From binary Download a prebuilt binary from the releases page and unzip it. From source Go version 1....

Redpoint

Redpoint Digital Bond's ICS Enumeration Tools Redpoint is a Digital Bond research project to enumerate ICS applications and devices. We use our Redpoint tools in assessments to discover ICS devices and pull information that would be helpful in secondary testing. A portion of those tools will be...

CertCrunchy

/ \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ Just a silly recon tool that uses data from SSL Certificates to find potential hostnames What the? It just a silly python script that...

fisy-fuzz

FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...

CVE-2024-10124-Poc

CVE-2024-10124-Poc The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation due to a missing capability check on the tpinstall function in all versions up to, and including, 1.1.1. This makes it...

CUAHarm

Measuring Harmfulness of Computer-Using Agents 🤗 Hugging Face 📄 Paper 📋 Introduction CUAHarm is a benchmark designed to evaluate the safety risks of Computer-Using Agents CUAs - AI agents that can autonomously control computers to perform multi-step actions. Key Features 🔍 CUAHarm Dataset : A...

CVE-2017-13156-Janus

CVE-2017-13156-Janus Reproduction Attackers can use the Janus vulnerability CVE-2017-13156 to bypass Android's signature scheme V1 mechanism, arbitrarily modifying application code without affecting its signature. Android's signature mechanism is used to protect applications from tampering...

UNISOCUnlocker

UNISOCUnlocker Based of CVE-2022-38694 this adds a simple UI to remove the persist partition, commonly used for FRP IMPORTANT! Do not panic if the device appears to have a black screen. After the script is finished press the power button on the device. It should boot up normally after that. How 2...

Bolt-CMS-3.6.2---Cross-Site-Scripting

Bolt CMS 3.6.2 - Cross-Site Scripting Vulnerability Bolt CMS 3.6.2 - Cross-Site Scripting Vulnerability CVE-2018-19933 https://vulners.com/cve/CVE-2018-19933 Proof of Concept To exploit vulnerability, Bolt CMS 3.6.2 allows XSS via text input click preview button as demonstrated by the Title field...

cve-2024-12085

CVE-2024-12085 Infoleak exploit Note, this exploit is not versatile! Target module and checksums are hardcoded. Automatic checksum calculation has yet to be implemented. Miscellaneous files port-forwarding.py is modified from https://gist.github.com/WangYihang/e7d36b744557e4673d2157499f6c6b5e. It...

CVE-2024-50492

🚨 CVE-2024-50492 - ScottCart 🔥 Exploit Script for ScottCart 🧑‍💻 By Nxploit – Khaled Alenazi 📌 Description The ScottCart plugin for WordPress versions ≤ 1.1 is vulnerable to Remote Code Execution RCE. This allows unauthenticated attackers to execute arbitrary PHP functions on the server through a...

CVE-2025-28915

CVE-2025-28915 - WordPress ThemeEgg ToolKit Arbitrary File Upload Exploit 📌 Description An Unrestricted File Upload vulnerability in the ThemeEgg ToolKit plugin for WordPress versions ≤ 1.2.9 allows authenticated attackers to upload web shells to the server. This can lead to remote code execution...

wannafind

wannafind Simple script using nmap to detect CVE-2017-0143 MS17-010 Windows SMB and CVE-2017-7494 SAMBA in your network Usage: wannafind.sh IP|Network wannafind.sh 192.168.1.0/24...

CVE-2021-22192

CVE-2021-22192 CVE-2021-22192 Range: Unauthorized User RCE Vulnerability 0x10 Range Environment 0x20 Directory Structure CVE-2021-22192 ├── README.md ............... This README ├── imgs .................... Images for README ├── gitlab .................. Gitlab container mount directory │ ├──...

CVE-2025-34161

Field| Value ---|--- CVE ID| CVE-2025-34161 Affected| Coolify = v4.0.0-beta.420.6 Fixed in| v4.0.0-beta.420.7 Severity| Critical CVSS 4.0| CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-78 OS Command Injection Summary Coolify versions prior to and including...

PowerShell-PrintNightmare

PowerShell-PrintNightmare A collection of scripts to help set the appropriate registry keys for CVE-2021-34527 shared as part of our blogs outlining various mitigation options. servers.ps1 contains the registry settings related to PointAndPrint. You still need to install the patch! workstations.p...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...