exp_hub

0x01 Note This project is only for legal penetration testing and enthusiast reference learning. Please comply with the "Cybersecurity Law of the People's Republic of China" and corresponding local laws. It is prohibited to use this project for illegal operations, otherwise you will bear the...

metasploitable-penetration-testing-lab

🔐 Metasploitable 2 Penetration Testing Lab A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment. 📌 Project Overview This project simulates a real-world penetration...

DashOverride

DashOverride What This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager vROPS that impacts versions Run root@kitploit: researcher@mars:$ ./poc.py + usage: ./poc.py connec...

PIVert

PIVert - PIV smart card emulator Introduction PIVert is a NIST SP 800-73 PIV smart card emulator. You can supply PIVert with a PFX file containing a certificate and corresponding private key and the tool will emulate the card to Windows as a genuine PIV card. The card can then be used for...

vcenter-cve-2021-21980-lab

CVE-2021-21980 Vulnerable Test Environment Overview Realistic test environment simulating VMware vSphere Web Client path traversal vulnerability. ⚠️ WARNING: Vulnerable test environment. Do NOT expose to internet! Quick Start Build and Run root@kitploit: podman build -t vcenter-lab . podman run -d...

CVE-2021-21974

CVE-2021-21974 PoC - VMware ESXi RCE Exploit Description This repository contains a Proof of Concept PoC for the vulnerability CVE-2021-21974 , a remote code execution RCE vulnerability in the OpenSLP service of VMware ESXi. Successful exploitation could allow an unauthenticated attacker to execu...

cve-2021-21994_POC

CVE-2021-21994 — VMware ESXi SFCB Authentication Bypass — Lab Research Kit...

Modified-CVE-2024-37081-POC

VMware vCenter - CVE-2024-37081 Proof of Concept which our team decided to modify and make it more useful...

VMWare-vRealize-SSRF

VMWare-vRealize-SSRF VMWare vRealize SSRF-CVE-2021-21975 USE python CVE-2021-21975.py...

westone-CVE-2021-21972-scanner

westone-CVE-2021-21972-scanner VMware vCenter Server remote code execution vulnerability.A malicious attacker with access to port 443 can send a carefully constructed request to vCenter Server, which will eventually cause remote arbitrary code execution. Installation & Usage git clone...

vmxnet3Hunter

Summary: vmxnet3Hunter will find all virtual machines running the vmxnet3 adapter and flag the parent cluster as vulenrable to the recent vmEscape advisory. VMware Advisory: https://www.vmware.com/security/advisories/VMSA-2018-0027.html CVE: CVE-2018-6981, CVE-2018-6982...

CVE-2023-34039

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...

CVE-2024-11467

CVE-2024-11467 The macOS operating system uses XPC services for basic inter-process communication between various processes, such as between the XPC Service daemon and third-party application privileged helper tools. The VMware Horizon Client, upon installation, registers the...

vCenter-Server-Workaround-Script-CVE-2021-44228

vCenter Server Workaround instructions CVE-2021-44228 Workaround instructions to address CVE-2021-44228 in vCenter Server VMware vCenter log4j workaround This is the workaround VMware vCenter log4j vulnerability CVE-2021-44228 processs put together as a single script VMware have released a python...

CVE-2022-22948

CVE-2022-22948 Information Disclosure in VMWare vCenter Pentera’s research group discovered a vulnerability in VMWare’s vCenter Server program affecting VMWare’s software installed in 500,000 organizations worldwide responsible to manage their most critical systems Our findings were proactively...

VMware VRealize Network Insight - Remote Code Execution

VMWare Aria Operations for Networks vRealize Network Insight is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on the underlying operating system as the ro...

The vulnerability of the VMXNET3 network adapter allows attackers to escalate their privileges and execute arbitrary code on VMware Workstation and VMware Fusion hypervisors.

The vulnerability of the VMXNET3 network adapter in VMware Workstation and VMware Fusion relates to a potential overflow condition. Exploiting this vulnerability can allow an attacker to gain elevated privileges and execute arbitrary code...

VMware vCenter Server - Out-of-Bounds Write

vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...

CVE-2026-90971

Server-Side Request Forgery SSRF in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for...

CVE-2026-90971

Server-Side Request Forgery SSRF in the VMware synchronization feature in Devolutions Server 2026.2.16 and earlier allows a low-privileged authenticated user to obtain other users' credentials and reach internal or cloud-metadata network endpoints via a crafted connection definition submitted for...