CVE-2021-22005-metasploit

CVE-2021-22005-metasploit the metasploit scriptPOC/EXP about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -p...

CVE-2018-3191-Rce-Exploit

CVE-2018-3191-Rce-Exploit Author: Break Step 1: java -jar GenPayload.java output SJpayload.bin, Address is RMI Server address Step 2:java -jar RMISERVER.jar httpaddress, RMI server listening on port 1099 and load remote Reverse classes on web server Step 3:put two filesreverse shell...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ This script is...

mssql-command-tool

mssql Terminal Connection Tool | Command Execution Example ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "whoami" nt service\mssqlserver ./mssql-command-tool-mac -s 10.10.10.10 -u sa -p jas502n -P 1433 -c "net user" \ 的用户帐户...

CVE-2026-41089

CVE-2026-41089 — Windows Netlogon CLDAP Stack Buffer Overflow RCE Exploit CVE-ID: CVE-2026-41089 CVSS: 9.8 Critical CWE: CWE-121 Stack-based Buffer Overflow Attack Vector: UDP/389 CLDAP SearchRequest Impact: Remote Code Execution RCE / Denial of Service DoS Affected Versions: Windows Server 2012 ...

CVE-2020-14882

CVE-2020-14882 CVE-2020–14882 - research by Jang Code by @s1kr10s Poc: POST Review / Video: https://testbnull.medium.com/weblogic-rce-by-only-one-get-request-cve-2020-14882-analysis-6e4b09981dbf https://www.youtube.com/watch?v=JFVDOIL0YtA&feature=youtu.be...

LightMe

LightMe LightMe is a Simple HTTP Server serving Powershell Scripts/Payloads after Obfuscate them and run obfuscation as a service in backgroud in order to keep obfuscate the payloads which giving almost new obfuscated payload on each HTTP request Main Features Obfuscate all powershell files withi...

React2Shell

⚛️ React2Shell CVE-2025-55182 Advanced Exploitation Toolkit for Next.js Server Actions CVE-2025-55182. React2Shell is a powerful, interactive shell wrapper designed to exploit the React2Shell vulnerability. It goes beyond simple RCE by providing command history, file transfer capabilities, and...

CVE-2020-16012-PoC

M2 Project - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu --disable-software-rasterizer...

CVE-2021-21985_PoC

Vulnerability Details VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 The vSphere Client HTML5 contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with...

cve-mcp-server

🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...

bouvet

Bouvet Isolated code execution sandboxes for AI agents About • How It Works • MCP Tools • Documentation What is Bouvet? Bouvet boo-veh is an MCP server that creates secure, isolated sandboxes for AI agents to execute code. When an AI agent needs to run Python, Node.js, or shell commands, Bouvet...

cortex

CORTEX v1.0.1 - INSTALLATION AND QUICK START Cortex v1.0.1 ships as a single portable Windows application: cortex.exe. The x64 and x86 instrumentation runtimes live in the runtime folder and are selected automatically for each target. Nothing else has to be installed no Qt, no Visual C++ runtime...

CHN-Server

CHN-Server Community Honey Network server Find the documentation here: https://communityhoneynetwork.readthedocs.io...

CVE-2020-11800

Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required Dockerfile Required This environment uses a custom Dockerfile based on the vulnerable Zabbix Server image provided by Vulhub. FROM vulhub/zabbix:3.0.3-server The Dockerfile builds a local image usin...

auth

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...

socks5

socks5 Socks5/Socks5h server and client This project is to add protocol support for the Bridge, or it can be used alone Usage API Documentation Example Support for the CONNECT command Support for the BIND command Support for the ASSOCIATE command License Licensed under the MIT License. See LICENS...

ldap-swak

LDAP Swiss Army Knife Multi-function LDAP server utility. Quickly setup LDAP server for testing purposes, MitM proxies for intercepting plaintext or forwarding NTLM credentials or exploit various Java JNDI/LDAP Client vulnerabilities. Author: Moritz Bechler [email protected] Project...

CVE-2002-0288

CVE-2002-0288 Phusion WebServer 1.0 - Directory Traversal 1 Exploit-db publication at https://www.exploit-db.com/exploits/21291/ CVE-2002-0288 Phusion WebServer 1.0 - Directory Traversal 2 Exploit-db publication at https://www.exploit-db.com/exploits/21292/ Author Alex Hernandez aka @alt3kx...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...