CVE-2024-2053

LFI to RCE Exploit via Log Poisoning Python3 exploit for CVE-2024-2053 Artica Proxy 📝 Description This Python3 script exploits Local File Inclusion LFI vulnerabilities to achieve Remote Code Execution RCE through log poisoning techniques. Specifically designed for Artica Proxy CVE-2024-2053 but...

CVE-2023-38831

CVE-2023-38831 Exploit - Bait and Switch Archive Generator Overview This Python script is designed to generate a "bait and switch" archive file. It is meant for educational and ethical hacking purposes only. Please ensure that you have the necessary permissions before using this script. A "bait a...

CVE-2014-6271-SHELLSHOCK

CVE-2014-6271-SHELLSHOCK 🐚 Shellshock Exploitation Script 🎯💻🔍 This Python script exploits the Shellshock vulnerability CVE-2014-6271 to execute commands remotely or establish a reverse shell on a vulnerable target. 🛠️⚠️ ⚠ Disclaimer 🚨❗ This script is intended for educational and authorized...

CVE-2023-42793

Usage: save it as teamcity-admin-creation.nse and run: nmap -p 8111 --script teamcity-admin-creation --script-args url=https://target-url...

Path-Transversal-CVE-2025-31125-

Vite Exploit CVE-2025-31125 Description: Exploits path traversal in Vite Development Server's @fs endpoint CVE-2025-31125 to access sensitive files like /etc/passwd and /etc/hosts via crafted URLs. Created by Harsh Gupta. Usage: python viteexploit.py -u http://target.com python viteexploit.py -f...

Security Bulletin: IBM Cloud Pak for Data System (CPDS 2.0) is affected by multiple vulnerabilities in various components

Summary IBM Cloud Pak for Data System 2.0 includes several open-source, third-party, and containerized components as part of its software stack and system environment. Multiple security vulnerabilities have been identified across various components and libraries, including PLY, pyOpenSSL,...

PoC-CVE-2017-5638

PoC: Apache Struts2 CVE-2017-5638 Safe Educational Demo 📌 Overview This project is a Proof-of-Concept PoC for CVE-2017-5638 , a famous Apache Struts2 vulnerability that allowed attackers to execute arbitrary code on affected servers. ⚠️ This repository contains a safe, non-exploitative demo...

Joomla3.7-SQLi-CVE-2017-8917

Summary It is a simple script to use ZoomEye API to batch-scan Joomla 3.7 SQL injection CVE-2017-8917. Usage git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Go!!! Reference...

CVE-2019-8331

Eng Description CVE-2019-8331 is a Cross-Site Scripting XSS security vulnerability found in Bootstrap, a JavaScript library widely used for developing websites and mobile applications. This vulnerability occurs because Bootstrap does not properly sanitize data sent via thedata-template attribute ...

docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple Stored XSS v2.2.18 Author: Sergio Description: Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title in the My Preferences - Manage Shortcuts Attack Vectors: Scripting A vulnerability in the...

CVE-2020-9484-exploit

CVE-2020-9484-exploit Apache Tomcat Remote code execution Before execute the script please change the ysoserial path according to your file path. ysoserial : https://github.com/frohoff/ysoserial for more reference :...

http-stalling-detector

HTTP Stalling Detector HTTP stalling DoS attacks take advantage of an inability for webservers to determine if a remote client is just connected over a slow link or if the remote client is deliberately sending data very slowly to avoid the webserver doing a timeout and shutting down the connectio...

domainim

DOMAINIM Características • Uso • Instalación • Uso • Contribuir • Notas adicionales Domainim es una herramienta rápida de reconocimiento de dominios para el escaneo de redes organizativas. La herramienta tiene como objetivo proporcionar una visión general breve de la estructura de una organizació...

exphub

Notice 终究还是觉得每个漏洞每个单独的脚本很不方便，故将所有的poc和exp脚本整在一起，可以一键扫描+漏洞利用，由于近期都在做整合所以exphub搁置许久没有更新，目前整合版已经接近尾声，将在10月发布（节后），敬请关注 已经发布 --- https://github.com/zhzyker/vulmap Exphub Exphub漏洞利用脚本库 （想要star⭐ 目前包括Webloigc、Struts2、Tomcat、Drupal的漏洞利用脚本，均为亲测可用的脚本文件，尽力补全所有脚本文件的使用说明文档，优先更新高危且易利用的漏洞利用脚本...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

cve-2019-16097

cve-2019-16097 1. Add the URLs you want to detect in urls.txt 2. Run the cve-2019-16097 script in python3 environment python3 cve-2019-16097.py 3. After batch detection is complete, view the URLs with successfully written accounts in results...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 2.0 have been addressed in version 11.3.1.3-IF4 Vulnerability Details CVEID:CVE-2026-59889 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CVE-2024-42009-roundcube-xss

CVE-2024-42009 — Roundcube Webmail 1.6.6 Stored XSS PoC For authorised security testing, CTF environments, and educational research only. Using this tool against systems you do not own or have written permission to test is illegal under the Computer Misuse Act 1990 UK, the CFAA US, and equivalent...

botb

Salir de la Caja BOtB BOtB es una herramienta de análisis y explotación de contenedores diseñada para ser utilizada por pentesters e ingenieros, además de ser compatible con CI/CD usando tecnologías CI/CD comunes. ¿Qué hace? BOtB es una herramienta de línea de comandos que te permite: Explotar...