CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...

Log4j

1.Create a Sample Vulnerable Application . 2.Start a netcat listner . 3.Run the exploit . 5.Use jdk1.8.020 for better results . Exploit-db - https://www.exploit-db.com/exploits/50592...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

NodeGoat

NodeGoat Node.js는 가볍고 빠르며 확장성이 뛰어나 웹 애플리케이션 개발에 널리 채택되고 있는 플랫폼입니다. 이 프로젝트는 Node.js로 개발된 웹 애플리케이션에 OWASP Top 10 보안 위험이 어떻게 적용되는지, 그리고 이를 효과적으로 해결하는 방법을 배울 수 있는 환경을 제공합니다. 시작하기 Node.js 웹 애플리케이션을 위한 OWASP Top 10: 알아보기! 이 애플리케이션에는 OWASP Top 10 취약점과 이를 해결하는 방법을 설명하는 튜토리얼 페이지가 포함되어 있습니다. 애플리케이션이 실행되면...

Vanna - SQL injection

Vanna v0.3.4 is vulnerable to SQL injection in its DuckDB integration exposed to its Flask Web APIs. Attackers can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the victim's file system, such as backdoor.php with contents . This can lead to...

hardening-k8s-containers

Aplicación de toma de notas intencionalmente vulnerable Este repositorio contiene una aplicación muy simple y vulnerable utilizada para demostrar las diferencias entre desplegar esta aplicación con la configuración predeterminada en un clúster de Kubernetes, frente a agregar algunas configuracion...

log4j2-CVE-2021-44228

Sample Log4j2 vulnerable application CVE-2021-44228 Versions Affected: all versions from 2.0-beta9 to 2.14.1 This application is based on Spring Boot web application vulnerable to CVE-2021-44228 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it: Import...

dnsFookup

DnsFookup v 2.0.1 DNS Rebinding 프레임워크로 다음을 포함합니다: 당연히 DNS 서버 새로운 서브도메인을 생성하고 DNS 서버를 제어하며 로그를 확인하는 등의 작업을 위한 Python 웹 API 더 편하게 사용할 수 있도록 만든 조잡한 React 앱 변경 로그 API 문서 무슨 기능을 하나요? Burp Collaborator처럼 DNS 빈bin을 생성할 수 있게 해줍니다. 하지만 몇 가지 더 많은 기능을 제공합니다... 생성된 서브도메인이 어떤 IP/도메인으로 몇 번 해석될지 지정할 수 있습니다. 현재는...

Helpdesk-Telecom-CVE-2025-64459

Preparing to download the repository 1. Update packages: sudo apt update 2. If necessary, install git: sudo apt install -y git 3. It is necessary to set up port forwarding rules. In the "Network" settings of the Debian 12.11.0 machine, click "Port Forwarding". 4. Add a rule: Name: Django; Protoco...

CVE-2023-38646

CVE-2023-38646 Code to detect/exploit vulnerable metabase application...

Exploit for Improper Input Validation in Python

CVE-2023-24329 — Parser Differential Lab Educational use...

SQLite-Injection-Lab

آزمایشگاه تزریق SQL SQL Injection Lab یک محیط آموزشی جامع ب...

xss-lab-hack-v1

🎯 Laboratorio XSS - Práctica de Pentesting Un entorno complet...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-...

Exploit for Out-of-bounds Write in Php

Task Management APP CVE-2019-11043 Lab Minimal PHP app with...

Exploit for CVE-2025-49113

Roundcube RCE Lab CVE-2025-49113 !Open in GitHub Codespac...

Exploit for CVE-2025-49113

Roundcube RCE Lab CVE-2025-49113 !Open in GitHub Codespac...

Exploit for CVE-2025-4664

CVE-2025-4664 This repository contains a PoC for exploiting CV...

CVE-2025-26198

CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component. The application fails to sanitize user-supplied input in the admin login form before directly including it in SQL queries. This allows unauthenticated attackers to inject arbitrary...

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...