CVE-2024-34351

CVE-2024-34351 Test-bed for CVE-2024-34351: I used the latest vulnerable version of Next.js, which is 14.1.0. Set up the environment with the following command: npm install npm run dev...

dnxfirewall

NOTICE: The license has changed from the CMD version GPLv3. The 'FULL' version current branch is licensed under AGPLv3. Overview DNXFIREWALL™ is an optimized/high performance collection of applications and services to convert a standard linux system into a zone based next generation firewall. The...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type: application/x-www-form-urlencoded...

Etern-blue-Windows-7-Checker

Eternalblue SMB1 Windows7/10 checker Updated and now detects Windows 7 and as well as old version Windows 10 that supports SMB 1. I only implemented smb 1 and any smb 2 server you try this on will return a "not vulnerabile". I researched on how the structure of a SMB1 packet and how to constructe...

React2Shell-CVE-2025-55182

React2Shell CVE-2025-55182 A proof-of-concept exploit demonstrating a remote code execution vulnerability in Next.js applications through prototype pollution in the React server components rendering pipeline. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only...

CVE-2025-22652

CVE-2025-22652 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Payment Forms for Paystack Vulnerable version = 4.0.1 Component slug payment-forms-for-paystack Component link https://wordpress.org/plugins/payment-forms-for-paystack/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Canary Exploit for Parquet CVE-2025-30065 -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / \ . / \ . / -. |...

CVE-2017-9101

PlaySMS 1.4 authenticated RCE Simple method of performing remote code execution through the Phonebook CSV upload issue as described on ExploitDB. Either run a single command: % python3 playsmshell.py --url http://localhost/playsms --password playwithsms -c 'id' Grabbing CSRF token for login...

CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk This script allows you to generate exploits for targeting CVE-2022-4510 Binwalk vulnerabilities. The exploits can be used for testing and demonstrations. The supported options include SSH, command execution, and reverse shell. Prerequisites Python 3.x Usage 1. Clone the...

tc_hack

This tool uses a vulrubility within Apache Tomcat called CVE 2017 12617 to gain remote access to any server with the PUT method enabled. It can be downloaded here you will need to run it from the command line Usage: tchack target IP target port...

opsxcq-cve-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

godoh

🕳 godoh A DNS-over-HTTPS Command & Control Proof of Concept introduction godoh is a proof of concept Command and Control framework, written in Golang, that uses DNS-over-HTTPS as a transport medium. Currently supported providers include Google, Cloudflare but also contains the ability to use...

OpenPLC_v3

OpenPLC Runtime version 3 Introduction OpenPLC is an open-source programmable logic controller based on easy-to-use software. Our focus is to provide a low-cost industrial solution for automation and research. OpenPLC has been used in many research papers as a framework for industrial cybersecuri...

PrintNightmare

PrintNightmare Python implementation for PrintNightmare CVE-2021-1675 / CVE-2021-34527 using standard Impacket. Installtion $ pip3 install impacket Usage Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: printnightmare.py -h -debug -port destination port -target-ip ip address -hashe...

popeye

Popeye: Kubernetes Live Cluster Linter Popeye is a utility that scans live Kubernetes clusters and reports potential issues with deployed resources and configurations. As Kubernetes landscapes grows, it is becoming a challenge for a human to track the slew of manifests and policies that orchestra...

HackBrowserData

HackBrowserData HackBrowserData is a command-line tool for decrypting and exporting browser data passwords, history, cookies, bookmarks, credit cards, download history, localStorage, sessionStorage and extensions from the browser. It supports the most popular Chromium-based browsers and Firefox o...

CVE-2025-14172-Nuclei-Template

📄 Nuclei Template for CVE-2025-14172 🚀 Overview This repository features a Nuclei template specifically designed to detect a Missing Authorization Vulnerability CVE-2025-14172 in the WP Page Permalink Extension WordPress plugin. This issue allows authenticated attackers to remotely flush the site...

CVE-2024-37770

CVE-2024-37770 description 14Finger v1.1 was discovered to contain a remote command execution RCE vulnerability in the fingerprint function. This vulnerability allows attackers to execute arbitrary commands via a crafted payload. Attack Vector Unauthenticated attackers can execute command injecti...

agent-tieba

agent-tieba · Agent Reward Center Anonymous Injective Rewar...

dvcsharp-api

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. Docker docker-compose up Manual Install .NET Core 2.x SDK Microsoft .NET Core SDK Install dependencies and...