wordpress-exploits

wordpress-exploits Random Wordpress Exploits May or May Not Work. CVE-2019-19985 Info Description: Unauthenticated File Download w/ Information Disclosure CVE ID: CVE-2019-19985 CVSS v3.0 Score: 5.8 Medium CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Plugin: Email...

MalwareConfigLists

MalwareConfigLists Just some lists of Malware Configs...

COFFLoader

COFF Loader This is a quick and dirty COFF loader AKA Beacon Object Files. Currently can run un-modified BOF's so it can be used for testing without a CS agent running it. The only exception is that the injection related beacon compatibility functions are just empty. The main goal is to provide a...

pwned

pwned A command-line tool for querying Troy Hunttroy's Have I been pwned?haveibeenpwned service using the hibphibp Node.js module. !npm Versionnpm-imagenpm-url !Build Statusci-imageci-url Installation Download and install Node.jsnodejs, then install pwned globally using npm: npm install pwned -g...

in-toto

in-toto in-toto provides a framework to protect the integrity of the software supply chain. It does so by verifying that each task in the chain is carried out as planned, by authorized personnel only, and that the product is not tampered with in transit. in-toto requires a project owner to create...

watchtowr-vs-telnetd-CVE-2026-32746

watchtowr-vs-telnetd-CVE-2026-32746 Detection Artifact Generator for telnetd CVE-2026-32746. See our blog post for technical details. Detection in Action python watchtowr-vs-telnetd-CVE-2026-32746.py --rhost 127.0.0.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | /...

CVE-2024-43919

CVE-2024-43919 YARPP = 5.30.10 - Missing Authorization Description The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in the /includes/yarppprosetdisplaytypes.php file in all versions up to, and including,...

msgspec-python313-pre

msgspec-python313-pre CVE-2025-27607 fix...

URLextractor

URLextractor Information gathering & website reconnaissance Usage: ./extractor http://www.hackthissite.org/ Tips: Colorex: put colors to the ouput pip install colorex and use it like ./extractor http://www.hackthissite.org/ | colorex -g "INFO" -r "ALERT" Tldextract: is used by dnsenumeration...

CVE-2024-6386

CVE-2024-6386 - RCE via Twig SSTI in WPML PoC PoC on Python+Selenium Detailed research in Russian: CVE-2024-6386 CVSS Base Score: 9.9 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Summary In WPML you are available to use specific WordPress Shortcodes that allows you to create macroses and...

CVE-2024-23334-PoC

CVE-2024-23334-PoC A proof of concept of the LFI vulnerability on aiohttp 3.9.1. The option 'followsymlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'followsymlinks' is set to True, there is no validation to check if reading a file is with...

cve-2017-10271-poc

CVE-2017-10271 POC Introduction This is an autotest poc for CVE-2017-10271. Having been tested on CentOS 7 and Windows 7/10. Building This project is written in rust language. You need to install rust environment from https://www.rust-lang.org/ first and then build the project with the following...

CVE-2021-41773-Playground

CVE-2021-41773-Playground Some docker images to play with CVE-2021-41773 and CVE-2021-42013 run docker compose up -d to spin up all the containers. Servers will run on ports 8080, 8081, 8082, and 8083. 8080 contains an Apache 2.4.49 with CGI disabled. 8081 contains an Apache 2.4.49 with CGI...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.5, next release will be 6.2.6. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

CVE-2026-31431-Golang

This repository does not have a README...

copy-fail-check

copy-fail-check CVE-2026-31431 Helper based on https://copy.fail/ Copy Fail Quick Check Interactive bash helper to review basic exposure related to CVE-2026-31431 Copy Fail and apply a temporary mitigation based on algifaead. Target compatibility Mainly intended for: Debian / Ubuntu AlmaLinux /...

AcrStealer-Custom-Protocol-Credential-Theft-Payload-Extraction-Analysis

1. Network Connections & SSL/TLS Configuration Process Hacker memory analysis reveals that AcrStealer establishes network connections using SSL/TLS for secure communication with its C2 server. Key Observations: SslClientCert – Uses client certificates for authentication evades detection...

CVE-2012-2982-Python-PoC

CVE-2012-2982-Python-PoC This was converted from a metasploit module as an exercise for OSCP studying. It originally came from becoming frustrated with no public exploits to use manually for the box Gamezone from TryHackMe. I anaylzed the metasploit code and coverted it to python. Proof screensho...

CVE-2022-0847

CVE-2022-0847 Vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes. To compile: gcc poc.c -o poc Usage: ./poc TARGETFILE OFFSET DATA Author and...

CVE-2023-32243

CVE-2023-32243. Essential Addons for Elementor 5.4.0-5.7.1 - Unauthenticated Privilege Escalation Info The plugin does not validate the password reset key, which could allow unauthenticated attackers to reset arbitrary account's password to anything they want, by knowing the related email or...

Browser-Pwning-

Browser-Pwning A proper well structured documentation for getting started with chrome pwning & v8 pwning Structure of document How this doc is organised 1. Motivation 2. Actual Study Material Motivation Browsers are one of today’s most used pieces of technology. On every off the shelf computer, i...

powershell-reverse-tcp

PowerShell Reverse TCP PowerShell scripts for communicating with a remote host. Remote host will have a full control over the client and all the underlying system commands. Check shells based on: Invoke-Expression PowerShell command here, process pipes here. Tested with PowerShell v5.1.19041.2673...

resilience4j

= Fault tolerance library designed for functional programming :author: Robert Winkler and Bohdan Storozhuk :icons: :toc: macro :numbered: 1 ifdef::env-github :tip-caption: 💡 :note-caption: ℹ️ :important-caption: ❗ :caution-caption: 🔥 :warning-caption: ⚠️ endif::...

CVE-2022-30114

Fastweb FastGate 'cmproxy' buffer overflow CVE-2022-30114 Introduction This script is a Proof of Concept PoC of CVE-2022-30114 and causes a reboot of Fastweb FastGate home routers, both GPON and VDSL2 version. CVE-2022-30114 is a heap-based buffer overflow in the 'cmproxy' executable, a program...

Copy_Fail_CVE-2026-31431_test_and_fix

Usage python3 testCVE-2026-31431.py Fix for Almalinux 9 / 10 until kernel update arrive sudo grubby --update-kernel ALL --args="initcallblacklist=algifaeadinit" sudo reboot Fix for Debian / Ubuntu until kernel update arrive as root echo "install algifaead /bin/false"...

CVE-2026-33331

CVE-2026-33331 — Stored XSS in oRPC OpenAPI Reference Plugin Proof-of-concept lab for stored XSS in orpc's OpenAPI documentation generation Purpose oRPC builds API docs pages from an OpenAPI spec. Before v1.13.9 it dumped the spec directly into a tag using JSON.stringify with no HTML encoding. An...

LazyMesh

LazyMesh Mesh routing system that supports using an OpenDHT proxy as the backend, so that nodes can communicate directly via the internet. Very early pre alpha, proof of concept, might not actually work, etc. This is meant for both hobby/HAM use cases, and more typical consumer/commercial IoT wor...

CVE-2021-43609-POC

Spiceworks Sort SQLi There's a SQLi in a sort parameter of Spiceworks. The full exploit chain is SQLi - file read - RCE. Demo Prerequisites apt update && apt install -y ruby-dev nodejs python3 python3-pip libsqlite3-dev pip3 install requests gem install bundler && cd rce && bundle install Stage 1...

CVE-2017-5124

CVE-2017-5124 UXSS with MHTML DEMO: https://bo0om.ru/chromepoc/PoC.php tested on Chrome/61.0.3163.100...

VEN0m-Ransomware

VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...

PANO

PANO - Platform for Analysis and Network Operations PANO is a powerful OSINT investigation platform that combines graph visualization, timeline analysis, and AI-powered tools to help you uncover hidden connections and patterns in your data. Getting Started • Features • Documentation • Contributin...

dronesploit

DroneSploit Easily pentest drones. This CLI framework is based on sploitkit and is an attempt to gather hacking techniques and exploits especially focused on drone hacking. For the ease of use, the interface has a layout that looks like Metasploit. pip3 install dronesploit ⚠️ When starting up the...

CVE-2026-0257

Forge a GlobalProtect auth override cookie using the public key from TLS CVE-2026-0257 A proof-of-concept script to test a target PAN-OS GlobalProtect portal or gateway for CVE-2026-0257. The script will attempt to forge a valid authentication override cookie by iterating over the certificate cha...

-CVE-2024-6095

Key Enhancements: 1. Random String Obfuscation : Introduced random string generation to obfuscate paths, making detection harder. 2. Advanced Payloads : Added more sophisticated payloads with different obfuscation techniques to evade security mechanisms. 3. Custom Headers : Included custom header...

douglas-042-HQ

Douglas-042 HEADQUARTERS Agent-based threat hunting and incident response, for estates that do not have an EDR. Sweep a fleet of Windows and Linux hosts for signs of compromise, decide what actually matters, and act on it — from one console, with one command per host. What it does A hunt is not a...

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...

CVE-2022-41040

CVE-2022-41040 Code set relating to CVE-2022-41040. scanner.py is a Python based scanner testing for the CVE-2022-41040. Requirements The only additional modules needed to run this code is requests and colorama. pip install -r requirements.txt Usage This script takes a single URL or a list of URL...

not-going-anywhere

Overview Not Go-ing Anywhere is a set of vulnerable Golang programs meant to show common vulnerabilities and provide a test bed for users to find, fix, and remediate Golang vulnerabilities. It is modeled on our not so smart contracts repository, and includes a mix of two types of programs: a...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE is a Static analysis Tool that Targets ios applications and brings important information such as Links, interesting files .json,cer,der,api and is very useful to show good results when you pentesting ios apps What new in this tool ✅Fast & easy to use ✅Get binary info like...

CVE-2023-4634

CVE-2023-4634 RCE Exploit for Wordpress Plugin Media-Library Plugin 3.10 CVE-2023-4634 Info Patrowl discovered An unauthenticated RCE Vulnerability on Media-Librairy-Assistant Wordpress Plugin in version 3.10. The exploit is not trivial and requires just a little setup explained bellow. Global...

burp-awesome-tls

Awesome TLS This extension hijacks Burp's HTTP and TLS stack, allowing you to spoof any browser TLS fingerprint JA3. It boosts the power of Burp Suite while reducing the likelihood of fingerprinting by various WAFs like CloudFlare, PerimeterX, Akamai, DataDome, etc. This extension works without...

CVE-2024-26229

cl.exe exploit.c /link ntdll.lib...

CVE-2025-33073

CVE-2025-33073 Reflection Relay PoC Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled. 📋 Overview CVE-2025-33073 is a critical vulnerability that allows attackers to achieve SYSTEM-level code execution on Windows Domain...

sshesame

sshesame An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity sshesame accepts and logs SSH connections and activity channels, requests, without doing anything on the host e.g. executing commands, making network requests. Installation and usage Fro...

CPLDCOMTrigger

CPLDCOMTrigger Description A Python script depends on Impacket scripts to trigger the loading of a .cpl file into memory using a DCOM object. The CPL file path must already be added to the registry. The script uses the Open function in the IOpenControlPanel interface to load the CPL Control Panel...

An-Integrated-Wireless-Network-Forensic-Analysis-Framework

An-Integrated-Wireless-Network-Forensic-Analysis-Framework This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able to capture wireless network traffic, to analyze the captured traffic according to the...

SKA

About SKA allows you to implement a very simple and fast karma attack. You can sniff probe requests to choose the fake AP name or, if you want, you can insert the name of the AP manually evil twin attack. When target is connected to your WLAN you can active the HTTP redirection and perform a MITM...

sashay

Sashay Introduction ℹ️ Sashay is an all in one automatic installer for useful Linux based tools.There are over 340 tools available. Installation⬇️ pip install -U sashay Tool Categories Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing Forensics Tools Web Hacking Stress...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...