818 matches found
📄 n8n Workflow Automation Remote Configuration / Admin Data Extraction
This Metasploit module exploits multiple vulnerabilities in n8n workflow automation tool. It leverages a file read vulnerability to steal encryption keys and database, then uses stolen credentials to authenticate and execute arbitrary commands via the Execute Command node...
vulnerability-assessment-lab
vulnerability-assessment-lab Controlled security test...
Exploit for OS Command Injection in Docker
HATCH Host Access Testing for Container Hardening A com...
Ryan Liles, master of technical diplomacy
Cisco Talos is back with another inside look at the people who keep the internet safe. This time, Amy chats with Ryan Liles, who bridges the gap between Cisco's product teams and the third-party testing labs that put Cisco products through their paces. Ryan pulls back the curtain on the delicate...
creepytrix
🔒 CREEPYTRIX - Bitrix Pentest Tool v1.1 !Versionhttps://i...
SoK: The Pitfalls of Deep Reinforcement Learning for Cybersecurity
Deep Reinforcement Learning DRL has achieved remarkable success in domains requiring sequential decision-making, motivating its application to cybersecurity problems. However, transitioning DRL from laboratory simulations to bespoke cyber environments can introduce numerous issues. This is furthe...
Exploit for CVE-2025-49132
CVE-2025-49132-POC I made this poc for my personal cha...
📄 Online Grievance Redressal Software 2.6 SQL Injection
Online Grievance Redressal Software version 2.6 suffers from a remote SQL injection vulnerability. ============================================================================================================================================= | Title : Online Grievance Redressal Software 2.6 SQL...
Exploit for Race Condition in Canonical Ubuntu_Linux
Privilege Escalation Analyzer v4.0 A comprehensive Linux priv...
Exploit for Improper Input Validation in Boa Boa_Webserver
BOA Router Exploit Framework !Python Versionhttps://img...
Exploit for CVE-2023-39848
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...
OpenClaw
🦞 Moltbot/Clawdbot 1-Click RCE PoC A simplified, single-scrip...
WiFiPenTester: Advancing Wireless Ethical Hacking with Governed GenAI
Wireless ethical hacking relies heavily on skilled practitioners manually interpreting reconnaissance results and executing complex, time-sensitive sequences of commands to identify vulnerable targets, capture authentication handshakes, and assess password resilience; a process that is inherently...
📄 Oracle E-Business Suite 12.2.3 Request Smuggling
This script is a refined proof of concept targeting Oracle E‑Business Suite EBS vulnerability CVE‑2025‑61882. It corrects logical flaws in request smuggling payload construction, particularly around request termination and CRLF preservation, ensuring reliable proxy/backend desynchronization. The...
Exploit for CVE-2026-24134
CVE-2026-24134-PoC Overview This repository contains the...
Exploit for Argument Injection in Gnu Inetutils
Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based s...
XAMPP and PHPMyAdmin Web Security Research Playbook
This is a comprehensive security testing guide for XAMPP services. It follows a structured approach: 1 Reconnaissance and Information Gathering, 2 Initial Access Attempts, 3 Post-Authentication Exploitation. Each scenario includes realistic commands and expected outcomes for professional security...
Exploit for SQL Injection in Agentejo Cockpit
Synthetic Test Case: CVE-2020-35846 CWE: CWE-89 Origi...