CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap script. https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ Usage: $ python usermapscript.py RHOST -- The target address RPORT -- The target port TCP : 139 LHOST -- The listen address LPORT -- The listen port Installation sudo apt install...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

external_c2

Synopsis Cobalt Strike contains a new / experimental feature called externalc2. This bypasses the mallable profiles and allows the developper to craft it's own channels. This code is a POC, that in the end appeared to be the solution to a real life problem. Code content c2file.c: a C implementati...

MaliciousMacroGenerator

Malicious Macro Generator Utility Simple utility design to generate obfuscated macro that also include a AV / Sandboxes escape mechanism. Requirement Python 2.7 Usage MMG.Malicious Macro Generator v2.0 - RingZer0 Team Author: Mr.Un1k0d3r [email protected] Usage: MMG.py config output optional...

CVE-2022-43343

Description for CVE-2022-43343 N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken at Main.c Reproduction To reproduce the vulnerability, download a vulnerable version of N-Prolog v1.91 and compile the project: git clone...

CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...

LOGJ4_PocShell_CVE-2021-44228

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Remote Code Execution RCE Exploit Description This script exploits a Remote Code Execution RCE vulnerability in Pluck CMS v4.7.18. The vulnerability allows a malicious user to upload a malicious PHP file to the server and execute it, gaining remote command...

WCFDSer-ngng

WCFDSer-ngng A Burp Extender plugin, that will make binary soap objects readable and modifiable. Based on the original work of Brian Holyfield, all hail Brian http://blog.gdssecurity.com/labs/2009/11/19/wcf-binary-soap-plug-in-for-burp.html Why? This release fixes a bug where serialization wasn't...

blogpost_cve-2018-19987-analysis

CVE-2018-19987 D-Link OS command injection analysis Hello there! In this short blog post I'll break down a quick analysis that I performed to better understand the details behind CVE-2018-19987. At the beginning I went after this CVE because I thought that there wasn't any public information or...

CVE-2015-57115

CVE-2015-57115 Mass Checker For CVE-2015-57115 Description The CVE-2015-57115 Checker Script is a Python tool for detecting vulnerabilities related to CVE-2015-57115, which is a path traversal vulnerability in certain PHP applications. The script checks multiple URLs for the presence of this...

CVE-2022-46169

CVE-2022-46169 Exploit for CVE-2022-46169 Cacti versions before 1.2.3 Here remoteclientauthorized checks the clients hostname in poller table for entry function remoteclientauthorized // ... $clientaddr = getclientaddr; // ... $clientname = gethostbyaddr$clientaddr; // ... $pollers =...

MemoryMapper

Memory Mapper Memory Mapper is a lightweight library which allows the ability to map both native and managed assemblies into memory by either using process injection of a process specified by the user or self-injection; the technique of injecting an assembly into the currently running process...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 System Vulnerability Checklist A security assessment and network hardening exercise conducted against a vulnerable Linux target machine. The project focuses on identifying critical vulnerabilities, assessing their impact, and implementing firewall-based mitigation using IPTables. 📌 Project...

pridelocker-analysis

PrideLocker ESX encryptor analysis This repository contains resources related to the analysis made on PrideLocker and available on this blog post: https://www.synacktiv.com/publications/pridelocker-a-new-fork-of-babuk-esx-encryptor.html. an IDA Python script to deobfuscate strings embedded in the...

metasploit-pentest-report

Authorized Penetration Test: Metasploit Lab Scope and Authorization All targets used in this project are explicitly authorized: Target| IP| Authorization Basis ---|---|--- Metasploitable2| 192.168.3.130| Self-hosted VM on isolated host-only network. Intentionally vulnerable VM built for security...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

mail-security-tester

Mail Security Testing Framework A testing framework for mail security and filtering solutions. IMPORTANT: Don't do anything evil with this! Tests of cloud or otherwise hosted solutions should always be approved by the tested provider. Only use your own test accounts and don't annoy anyone with a...

TEST-CVE-2023-32233

Use-After-Free in Netfilter nftables when processing batch requests Vulnerability Details The affected code originates from the official Linux kernel from https://kernel.org/ and is part of the Netfilter nftables component net/netfilter/nftablesapi.c. Netfilter nftables allows to update its...

CamoDocs

CamoDocs Official repo of the EMNLP 2026 paper CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents. CamoDocs is a knowledge database poisoning attack against Retrieval-Augmented Generation RAG that needs no query inclusion. Each adversarial...