46718 matches found
CVE-2022-27518_POC
CVE-2022-27518POC docker pull quay.io/citrix/citrix-k8s-cpx-ingress:13.0-58.30 Use the following command to verify if CPX image is installed in docker images docker images | grep 'citrix-k8s-cpx-ingress' Use the following command to create a CPX container instance running in bridge mode docker ru...
CVE-2023-40930
Introduction It's an introduction on how to set up CVE-2023-40930 Repetition Enviroment Learn more about this CVE problem in "issue detail.pdf" Set up general You can use rasperry pi zero 2W or any other ARM64ARM32 also arch devices to set up this enviroment,this can be also set up on Android...
CVE-2020-8644-PlaySMS-1.4
CVE-2020-8644-PlaySMS-1.4 Python script to exploit PlaySMS before 1.4.3 Execution Open a port on your machine: And the execute exploit.py: ./exploit.py Changing the exploit Tou may want to change the reverse shell created by exploit.py To do this, you can change the function createrevshellencoded...
ridenum
RIDENUM - A simple open source method for performing null session brute forces Copyright 2018 TrustedSec Written by: David Kennedy ReL1K Twitter: @HackingDave and @TrustedSec Website: https://www.trustedsec.com . . . . . | \ | | | \ | || \ | | | | | | | / | | | | | | | .--. | | | | | | | | | | |...
DoNotDisturb
This repository does not have a README...
HostHunter
HostHunter v2.0 A tool to efficiently discover and extract hostnames providing a large set of target IPv4 or IPv6 addresses. HostHunter utilises simple OSINT and active reconaissance techniques to map IP targets with virtual hostnames. This is especially useful for discovering the true attack...
web-scanner
🌐 Web Scanner Tool 🌐 Developed by tmrswrr Version 1.0.0 A comprehensive tool for Web Domain Scanning including Subdomain Discovery, Directory Enumeration, Network Scanning, and Website Identification. 📷 Screenshots 📷 👇 💫 How to Use 💫 👇 📒 Read Me 📒 The Advanced Web Scanner is a versatile...
clawguard
🦞 ClawGuard v3 Enterprise AI Agent Security Toolkit - SKILL.md Driven Active Defense Core Concept The core defense of ClawGuard v3 is not in the code, but in SKILL.md! Each module's SKILL.md itself is a complete defense guide: Tells the Agent when to trigger Guides the Agent how to detect Provide...
CVE-2026-45258_1day_LPE_exploit
This repository does not have a README...
CVE-2023-29923
PowerJob V4.3.1 Unauthorized Vulnerability You can use this project to verify whether the website has a vulnerability of CVE-2023-29923 and support batch verification Use: 1. python3 CVE-2023-29923.py -u "http://ip:port" 2. python3 CVE-2023-29923.py -f url.txt...
CVE-2015-9251
CVE-2015-9251 [email protected] PoC for CVE-2015-9251 jQuery before 3.0.0. CVE-2015-9251 - PoC Exploit This repository contains a Proof of Concept PoC for the vulnerability CVE-2015-9251 in the jQuery library. The vulnerability allows a Cross-Site Scripting XSS attack through unsanitized JSO...
CVE-2020-14321
Python script to exploit CVE-2020-14321 - Moodle 3.9 Course enrolments allowed privilege escalation from teacher role into manager role to RCE. Teachers of a course were able to assign themselves the manager role within that course. Payload extracted from:...
CVE-2019-9053-Exploit-Python-3
CVE-2019-9053 Exploit Python 3 This repository contains an exploit for the vulnerability CVE-2019-9053 found in the CMS Made Simple CMSMS software. The exploit has been modified to work with Python 3 and is compatible with CMSMS version 2.2.9 and below. Description CVE-2019-9053 is a Time-Based...
sqlifinder
SQL Injection scanner made with python. Features • Install • Usage • sqlifinder is a tool with the function of detecting GET-based sql injection vulnerabilities in web applications using waybackurls, web crawlers and sql injection payloads. Features Fast and powerful scanner Include web crawler a...
bl_sbx
blsbx itunesstored & bookassetd Sandbox Escape This repository contains a proof-of-concept demonstrating how maliciously crafted downloads.28.sqlitedb and BLDatabaseManager.sqlite databases can escape the sandbox of itunesstored and bookassetd on iOS. By abusing their download mechanisms, the POC...
CVE-2026-3288-lab
CVE-2026-3288 Vulnerable Lab Docker NGINX Ingress Controller Configuration Injection ⚠️ WARNING : This lab contains intentionally vulnerable configurations for AUTHORIZED SECURITY TRAINING ONLY Vulnerability Overview CVE-2026-3288 CVSS 8.8 HIGH - Configuration injection in NGINX Ingress Controller...
wpstorecart-exploit
Simple PoC of wpstorecart before 2.5.30 plugin exploit CVE-2012-3576 written in bash...
CVE-2026-74936-gc-potato
CVE-2026-74936 A not fancy reproduction. The baseline required some fiddling here. Mozilla describes this issue as a WebAssembly use-after-free. Public fix 9823b5c86ffa keeps the exact trapping wasm::Code alive in JitActivation. The test performs a bad-signature cross-instance tail call. A Debugg...
CVE-2020-9380
PoC IPTV Smarters Exploit Usage python gld.py -u http://www.pirate-ilegal-tv.com/ -i Vulnerability file includes/ajax-control.php: ?php / @ PHP 5.6 @ Decoder version : 1.0.0.1 @ Release on : 24.03.2018 @ Website : http://EasyToYou.eu / sessionstart; if fileexists"functions.php" includeonce...
mousejack_transmit
This is code extending the mousejack tools https://github.com/RFStorm/mousejack. Replay/transmit tools have been added to the original tools. POC packets based on a Logitech Wireless Combo MK220 which consists of a K220 wireless keyboard and an M150 wireless mouse are included in the logs folder...
google_explorer
Welcome to Google Explorer Special thanks to ArchStrike and BlackArch for supporting ; + Google Mass Explorer PYTHON 3.6 This is a automated robot for google search engine and a massive exploitation tool. Make a google search and run a specific --plugin on the results. The dork you use is the key...
CaptainHook
Captain Hook What is it ? The purpose of this tool is to trace user inputs, in order to find injection points into sensitive methods like java.lang.Runtime.exec, java.sql.Statement.executeQuery, ... as well as the mutations on these inputs between the injection point and the method call. "Marks"...
Microsoft-Sentinel-SecOps
Microsoft Sentinel - SEC Operations Welcome to the Microsoft Sentinel - SOC Operations This repository contains many Microsoft Sentinel content with queries for exploration, hunting, and other activities. Resources Hunting Processes Security Events Updates Stuff Azure Sentinel Posts on Elli Shlom...
DInvoke
DInvoke Dynamic replacement for PInvoke on Windows. DInvoke contains powerful primitives that may be combined intelligently to dynamically invoke unmanaged code from disk or from memory with careful precision. This may be used for many purposes such as PE parsing, intelligent dynamic API...
CVE-2022-30190-Follina-Lab
🔴 CVE-2022-30190 — Follina MSDT RCE Lab Researcher: Abhimanyu Rawat Role: Technical Research & Cyber Security Operations Intern Date: May 8, 2026 📌 What is Follina? CVE-2022-30190 nicknamed "Follina" is a zero-day Remote Code Execution RCE vulnerability in Microsoft Windows that allows an attacke...
PATCH-CVE-2026-31431-Ubuntu_Debian
🛡️ CVE-2026-31431 Copy Fail Mitigation - Linux Kernel This repository contains scripts designed to neutralize the critical vulnerability CVE-2026-31431 , nicknamed "Copy Fail" , on Ubuntu systems. !IMPORTANT Compatibility: These scripts are tailored for and tested on Ubuntu Server 24.04 LTS. While...
realme-c53-unlock-root
Realme C53 RMX3760 — Bootloader Unlock & Root Toolkit English | Bahasa Indonesia Unlock bootloader and root your Realme C53 and other Realme devices. Supports KernelSU, Magisk, or a hybrid of both. ⚠️ RMX3760 Unisoc T612 : Bootloader unlock + Magisk root are verified working on BOTH Android 15 and...
CVE-2021-40303
CVE-2021-40303 perfex crm 1.10 is vulnerable to Stored Cross Site Scripting XSS via /clients/profile. poc: POST /clients/profile HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:78.0 Gecko/20100101 Firefox/78.0 Accept:...
CVE-2022-25943
CVE-2022-24934 Vulnerability Overview When installing WPS Office, the service program wpscloudsvr is installed with administrator privileges. This service is configured for manual start, but the access control list ACL attributes of the folder where the service program resides are misconfigured...
CVE-2018-8611
This repository does not have a README...
fierce-domain-scanner
Fierce.pl Domain Scanner ORIGINAL AUTHOR: RSnake https://twitter.com/rsnake Overview: Fierce is a semi-lightweight scanner that helps locate non-contiguous IP space and hostnames against specified domains. It's really meant as a pre-cursor to nmap, unicornscan, nessus, nikto, etc, since all of...
LiME
LiME Linux Memory Extractor A Loadable Kernel Module LKM for volatile memory acquisition from Linux and Linux-based devices, such as Android. LiME minimizes its interaction between user and kernel space processes during acquisition, producing memory captures that are more forensically sound than...
kbd-audio
kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...
CVE-2025-4138-4517-POC
CVE-2025-4138 / CVE-2025-4517 Python tarfile Filter Bypass via PATHMAX Symlink Escape Arbitrary file write throughfilter="data" / filter="tar" extraction Table of Contents Overview Vulnerability Details How It Works Affected Versio...
cve-2026-34472-auth-bypass-zte-h188a-router
CVE-2026-34472 Technical breakdown of CVE-2026-34472, an auth bypass via leaked credentials affecting ZTE ZXHN H188A V6 firmware. Summary In the tested H188A V6 builds, unauthenticated requests to the root path can reach pre-login wizard handlers and disclose sensitive data including: WLAN PSKs...
CVE-2026-67599_ClearOS_RCE
OS Command Injection in Log Viewer Filter Parameter Package: ClearFoundation Tested Versions: ClearOS 7.9.1.342252 Vulnerability Type: OS Command Injection CWE-78 Severity: High CVE : CVE-2026-67599 CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Score: 7.2 Thank you to VulnCheck f...
PoC-CVE-2022-26809
PoC-CVE-2022-26809 PoC for CVE-2022-26809, analisys and considerations are shown in the github.io. The PoC has been writtin overriding Impacket functions. Tested with: impacket version 0.10.0 The PoC has not been fully tested, because it should trigger the vulnerability, i.e integer overflow, tha...
defcon32
Defcon 32 - BugBounty Village Workshop Slides Presentation Slides Unveiling Vulnerabilities: A Comprehensive Guide to Bug Bounty Recon Documentation ProjectDiscovery Docs Installing ProjectDiscovery Tools Install PDTM Fuzzing / DAST Workshop...
D-Link-CVE-2021-27342-exploit
D-Link-CVE-2021-27342-exploit Exploit for CVE-2021-27342 vulnerability telnet authentication brute-force protection bypass...
MITMer
MITMer This tool can do the following: MITM attack on a specific host or all LAN hosts. Show HTTP and DNS activity of attacked hosts. Drop DNS queries asking about a website and redirects them to your PC. Convert that website into a fake page and host it on your PC. Dependencies: python2 scapy...
embark
EMBArk - The firmware security scanning environment About EMBArk is a tool for centralized firmware analyzing. Scan, Identify, Track, Report. Built to be simple but powerful. It's the web-based enterprise interface for the firmware security scanner EMBA. It is developed to provide the firmware...
exploits
Exploits Exploits and proof-of-concept code from the team at Hacker House. Filename| Description ---|--- AirWatchMDMJailbreakBypass.txt| Bypass jailbreak detection on mobile device management AirWatch for IOS adobe-psp.tgz| Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow PSP bypass...
CVE-2025-30208_POC
Scan without proxy python3 poc.py -f urls.txt Scan with proxy python3 poc.py -f urls.txt --proxy http://127.0.0.1:8080...
CVE-2026-26980-Ghost-CMS-Api
CVE-2026-26980 Ghost CMS SQL Injection PoC This repository contains a Go-based proof-of-concept tool for demonstrating and validating the Ghost CMS Content API SQL injection vulnerability described by CVE-2026-26980. The implementation is based on the exploit flow implemented in the main Go sourc...
browser-security-project
OWASP Browser Security Project The OWASP Browser Security Project raises awareness, provides education, and establishes best practices for securing modern web browsers. Browsers now serve as the primary execution environment for most applications, and this project offers clear, actionable guidanc...
CVE-2023-28432
CVE-2023-28432 MinIO Information Disclosure Leaks Account Passwords The MinIO system has an information disclosure vulnerability. An unauthenticated remote attacker can obtain all sensitive information, including MINIOSECRETKEY and MINIOROOTPASSWORD, by sending a specially crafted POST request to...
dirtyPipe-automaticRoot
Dirty Pipe automatic root exploit CVE-2022-0847 Dependencies: Python 3.10 or above How to use: Automatic root: $ python3.10 dirtyPipe.py -a + hjacking super user in /etc/passwd + dropipng shell Write a no write permission, immutable or read-only mounted file: $ python3.10 dirtyPipe.py -w FILE...
CVE-2023-40028
CVE-2023-40028 Proof of Concept This repository contains a proof of concept POC for CVE-2023-40028, demonstrating a vulnerability in the Ghost content management system where authenticated users can upload symlinks, leading to arbitrary file read vulnerabilities. Disclaimer This POC is provided f...
meltdown-spectre-bios-list
Meltdown/Spectre BIOS/Firmware Updates list This is a list of all products an manufacturers which patched BIOS/Firmware addressing the Meltdown and Spectre vulnerabilities If you have better info please send pull requests. Why I did this? to have a parseable list for all my hardware Check your...