eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video Eternal Scanner 2.0...

autoPwn

Warning Completely re-writing this right now. Focus will be on interactive Linux apps that only take input from stdin for starters. Attempting to use Shellphish's Driller and Fuzzer functionality. autoPwn in it's current state will do this in limited form. Simply run autoPwn ./binary then select...

CVE-2025-32463-POC

CVE-2025-32463 - sudo Local Privilege Escalation PoC ⚠️ This repository contains a Proof of Concept PoC exploit for CVE-2025-32463 Intended only for educational purposes and use in authorized environments. 🧠 About the Vulnerability CVE-2025-32463 is a local privilege escalation vulnerability...

Exploit for CVE-2026-97631

EDK II PXE Security Lab — CVE-2026-97631 An educational labor...

Icedid-file-decryptor

IcedID Decryptor A script to statically decrypt license.dat files associated with IcedID infections. The script will also decrypt the .data section from unpacked IcedID samples. Notes: The script will automatically detect whether a PE file or license.dat file has been given. If a PE has been...

llm-security-101

LLM Security 101 Delving into the Realm of LLM Security: An Exploration of Offensive and Defensive Tools, Unveiling Their Present Capabilities. As we embrace Large Language Models LLMs in various applications and functionalities, it is crucial to grasp the associated risks and actively mitigate, ...

CVE-2022-22954

Analysis of CVE-2022-22954 Overview Workspace ONE Access workspace delivery as a service model provides multi-factor authentication, single sign-on, and conditional access for SaaS, web, and mobile applications. CVE-2022-22954 is a Server-side Template Injection vulnerability existing in the...

CVE-2011-2523-poc

CVE-2011-2523-poc This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules Requirements sudo python3 -m pip install pwntools Install git clone https://github.com/4m3rr0r/CVE-2011-2523-poc.git cd CVE-2011-2523-poc/ chmod...

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability

CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084, Atlassian Confluence OGNL Injection Vulnerability Atlassian Confluence is a widely used wiki system in enterprises, and some versions contain an OGNL expression injection vulnerability. Attackers can exploit this vulnerability to execute arbitrary code on the target...

root-my-webos-tv

Root my webOS TV A simple python script that starts a telnet server on vulnerable webOS devices as root. Verified TVs webOS 4.9.7 - 5.30.40 model LG43UM7000PLA webOS 5.5.0 - 04.50.51 model OLED55CXPUA webOS 6.3.3-442 kisscurl-kinglake - 03.36.50 model OLED48C1PUB webOS 7.3.1-43 mullet-mebin -...

POC-CVE-2023-32233

Use-After-Free in Netfilter nftables when processing batch requests Demo Vulnerability Details The affected code originates from the official Linux kernel from https://kernel.org/ and is part of the Netfilter nftables component net/netfilter/nftablesapi.c. Netfilter nftables allows to update its...

Shellshock_CVE-2014-6271

Shellshock CVE-2014-6271 Shellshock docker-compose.yml, poc.py 파일을 다운 받아 주세요 반드시 pip install requests 를 통해 requests 라이브러리를 다운받아 주세요!!! uv를 사용하시는 분들은 uv를 통해 requests 라이브러리를 venv 안에 넣어주세요!!! CVE Official Description --- In GNU Bash versions prior to 4.3, there was a problem with handling strings th...

ip2

@bybrave/ip2 Maintained fork of ip — IP address utilities for Node.js — with the unpatched SSRF advisory fixed. The original package has 38M downloads/month, no release since February 2024, and a HIGH-severity advisory CVE-2024-29415 / GHSA-2p57-rm9w-gvfp that affects every published version and...

youzer

youzer Fake User Generator for Active Directory Environments Introduction The goal of Youzer is to create information rich Active Directory environments. This uses the python3 library 'faker' to generate random accounts. pip3 install faker You can either supply a wordlist or have the passwords...

CVE-2023-49974

CVE-2023-49974 Customer Support System 1.0 - Cross-Site Scripting XSS Vulnerability in "contact" field/parameter on "customerlist" Page Description : Customer Support System 1.0 is vulnerable to stored XSS. A XSS vulnerability exists in version 1 of the Customer Support System. A malicious actor...

maltrieve

Stories in Ready Stories in In Progress | | | || | | |/ | | \ / | | | | | | | | | \ | | / | Maltrieve Maltrieve originated as a fork of mwcrawler. It retrieves malware directly from the sources as listed at a number of sites. Currently we crawl the following: Malc0de Malware Domain List Malware...

Go-RouterSocks

Router socks The next step after compromising a machine is to enumerate the network behind. Many tools exist to expose a socks port on the attacker's machine and send all the traffic through a tunnel to the compromised machine. When several socks ports are available, we have to manage different...

nahsra__antisamy_CVE-2017-14735_1-5-6

AntiSamy A library for performing fast, configurable cleansing of HTML coming from untrusted sources. Supports Java 8+. Another way of saying that could be: It's an API that helps you make sure that clients don't supply malicious cargo code in the HTML they supply for their profile, comments, etc...

CVE-2025-29927-PoC

CVE-2025-29927: Next.js Middleware Bypass PoC This repository contains a proof of concept PoC for CVE-2025-29927, a vulnerability in Next.js middleware that allows bypassing authentication and authorization checks through header manipulation. Vulnerability Details Affected Versions : = 11.1.4,...