doublehop

Doublehop This tool aims to assist in using PowerShell Remoting / WinRM to execute PowerShell commands on remote hosts through WinRM double hop technique. This tool assumes you have internal network and CLI access. Usage doublehop Usage: -c string Command we are executing. -j string Host we are...

log4shell-exploitation-detection

Log4Shell CVE-2021-44228 Exploitation, Detection & Remediation A hands-on offensive and defensive security project simulating the full lifecycle of the Log4Shell vulnerability: exploitation from an attacker-controlled VM, detection engineering in Splunk, and validated remediation. Why This Projec...

CVE-2024-24590-ClearML-RCE-Exploit

CVE-2024-24590 — ClearML Pickle Artifact RCE Overview Field| Details ---|--- CVE| CVE-2024-24590 Software| ClearML Affected Versions| 0.17.0 – 1.14.2 Vulnerability| Unsafe pickle deserialization of task artifacts Authentication| Requires write access to a ClearML project Impact| Remote Code...

Mass-CVE-2023-28121

CVE-2023-28121 WooCommerce Payments 5.6.2 - Unauthenticated Privilege Escalation Mass Add Admin User Introduction This script using Python3 and use threading for better process speed. The script has ben updated to 2 version. V1 is the old version and V2 the newer version with random username, ema...

CVE-2021-43798-Grafana-Exp

Grafana V8. Arbitrary File Read Exploit – Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is commonly used as a visualizer for time series data and application analytics in infrastructure, and is also widely adopted in oth...

FreePBX-SQLi-Exploit-Privilege-escalation

FreePBX: From Unauthenticated SQL Injection to Root Shell CVE-2025-57819 • FreePBX 16.0.40.7 • HTB Connected 📋 Executive Summary This walkthrough documents the complete compromise of the HTB machine Connected. The attack chain begins with an unauthenticated SQL injection vulnerability in FreePBX,...

CVE-2026-75429_PowerJob_friend_process_RCE

PowerJob Server Remote Code Execution via Unauthenticated /friend/process Groovy Injection 1. Summary The PowerJob Server distributed job scheduling / computing framework exposes the /friend/process endpoint on its Worker↔Server transport-layer HTTP port 10010 with no authentication whatsoever...

CVE-2025-8875-CVE-2025-8876

CVE-2025-8875 & CVE-2025-8876 How does this detection method work? Version detection template - anything running 2025.3.1.9 or older is considered vulnerable to CVE-2025-8875 & CVE-2025-8876 How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run th...

labs

Name| Description ---|--- CVE-2015-5531| Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls. CVE-2016-1909| Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch...

CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 Proof-of-Concept PoC exploit chain targeting the TP-Link Omada ER605 DDNS client daemon cmxddnsd when the device is configured to use the Comexe DDNS service. ⚠️ Legal / Ethics : This...

dns_watchdog_windows2

DNS Watchdog Windows A single-file PowerShell script that watches a Windows machine's own network traffic for signs of DNS poisoning / spoofing , using pktmon — the packet-capture tool built into Windows 10 1809+, Windows 11, and Windows Server 2019+. No third-party capture tool Wireshark, Npcap,...

CVE-2024-12856

CVE-2024-12856 This is an exploit for Four-Faith router models F3x24 and F3x36 to get a reverse shell. "The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to...

CVE-2026-67401-cPanel-EmailTrack-SQLi

CVE-2026-67401 — cPanel & WHM EmailTrack SQL Injection → Root RCE IOC Scanner, Mitigation Tool & Remediation Guide for the cPanel EmailTrack SQL Injection Vulnerability Keywords: CVE-2026-67401, cPanel exploit, cPanel SQL injection, WHM vulnerability, EmailTrack SQLi, Track Delivery SQL injection...

CVE-2026-73314

CVE-2026-73314: Unsupported PayPal signature algorithm accepted XenForo before 2.3.13 fails open when a PayPal REST webhook names an unsupported signature algorithm. What happens The webhook handler maps PAYPAL-AUTH-ALGO through a small allowlist. If the value is unknown, the mapped algorithm...

CVE-2020-7471

CVE-2020-7471 This repository provides the environment and POC for CVE-2020-7471 Potential SQL injection via StringAggdelimiter vulnerability. Affected Django versions 1.11 to 1.11.28 exclusive 2.2 to 2.2.10 exclusive 3.0 to 3.0.3 exclusive The following steps are required before downloading and...

CVE-2021-40438-Apache-2.4.48-SSRF-exploit

CVE-2021-40438 - Apache = 2.4.48 - SSRF Python exploit A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. CVSS v3.1: Base Score: 9.0 Severity: CRITICAL...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

SAFE

SAFE : Self Attentive Function Embedding Paper This software is the outcome of our accademic research. See our arXiv paper: arxiv If you use this code, please cite our accademic paper as: @inproceedingsmassarelli2018safe, title=SAFE: Self-Attentive Function Embeddings for Binary Similarity,...

anomaly-flow

Anomaly-Flow Framework for implementing Intrusion Detection Systems NIDS aimed at identifying anomalies in network flows using Machine Learning models. Reference paper: Anomaly-Flow: A Multi-domain Federated Generative Adversarial Network for Distributed Denial-of-Service Detection Create the...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...