CVE-2021-4034

CVE-2021-4034 Exploit Usage $ git clone https://github.com/Anonymous-Family/CVE-2021-4034.git $ cd CVE-2021-4034 $ make ! CVE-2021-4034 Exploit By whokilleddb ! Initializing Setup + Setup Done :D ! Setting Root Privileges ! Launching Root Shell /bin/whoami root Rough Patch chmod 0755 which pkexec...

CVE-2024-55591-POC

--port 443 --ssl Then use the prompt: FortiOS get system status FortiOS exit Reset admin password: python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! Developer Telegram: @chernyzhizn Disclaimer: This tool is provided for educational and authorized testing purposes...

CVE-2025-3639

CVE-2025-3639 PoC - Liferay Portal/DXP Login Bypass This repository contains a Proof of Concept PoC for CVE-2025-3639 , a login bypass vulnerability in Liferay Portal versions 7.3.0–7.4.3.132 and Liferay DXP various versions from 2024.Q1 to 2025.Q1.6. The PoC demonstrates how an unauthenticated...

2022-32250LPE

This repository does not have a README...

offensive-ai-compilation

Offensive AI Compilation A curated list of useful resources that cover Offensive AI. 📁 Contents 📁 🚫 Abuse 🚫 🧠 Adversarial Machine Learning 🧠 ⚡ Attacks ⚡ 🔒 Extraction 🔒 ⚠️ Limitations ⚠️ 🛡️ Defensive actions 🛡️ 🔗 Useful links 🔗 ⬅️ Inversion or inference ⬅️ 🛡️ Defensive actions 🛡️ 🔗 Useful links 🔗 💉...

Shadowbroker

🛰️ S H A D O W B R O K E R Global Threat Intercept — Real-Time Geospatial Intelligence Platform ShadowBroker ShadowBroker is a decentralized intelligence platform that aggregates real-time, multi-domain OSINT telemetry from 60+ live intelligence feeds into a single dark-ops map interface. Aircraft...

Room-Walkthrough-Billing

🧠 Room Walkthrough: Billing Written by: Aditya Bhatt | Open Source Contributor 📦 Overview In this walkthrough, we go full force into Billing Room , showcasing a vulnerable MagnusBilling instance, a juicy unauth RCE CVE-2023-30258, and a fail2ban sudo misconfig that screams “root me.” This room...

CVE-Wazuh

Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...

PoC-CVE-2017-3881

PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...

cve-2015-2315-report

cve-2015-2315-report This project contains a report and codes to simulate the situation for CVE-2015-2315...

Cable

Cable Cable is a post-exploitation tool used for reconnaissance and Discretionary Access Control List DACL focused exploitation of an Active Directory environment. This tool was primarily created to learn more about .NET offensive development in an Active Directory context, while hoping to expand...

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

CVE-2026-33937-for-DarkZeroReturns

POC for CVE-2026-33937 this is a poc for CVE-2026-33937 that was made with AI in order to exploit the Handelbars vulnerability in the Box DarkZeroRetuns the original poc https://github.com/EQSTLab/CVE-2026-33937/blob/main/exploit.py but it doesn't work for this specific box the poc was written by...

CVE-2026-60004

🚨 CVE-2026-60004 - RCE Critical Remote Code Execution in Gitea via diffpatch Git Hook A critical Remote Code Execution RCE vulnerability allowing arbitrary command execution through thediffpatch API endpoint by abusing Git hook execution. 📖 Overview CVE-2026-60004 is a Critical Remote Code...

CVE-2021-24084

WindowsMDMLPE Demo : https://youtu.be/o5PyVhj3eMw https://blog.0patch.com/2021/11/micropatching-unpatched-local-privilege.html...

CVE-2022-26134

CVE-2022-26134 links https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html https://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/ fetched IP list from...

erlvulnscan

Webbased concurrent scanner for CVE-2015-1635. Live implementation running here. This demonstration website is used for development of this project and it stability is not guaranteed. Information on this project is written here. As the "TODO" list documented there has been completed this code is...

cve-2021-33045

cve-2021-33045 Log in to the camera's web page by modifying the packets sent by the browser to /RPC2Login. Here, a mitmproxy script is used to implement the relevant functionality. Similar functionality can also be implemented using Fiddler or Burp Suite. Usage: mitmweb --showhost --set...

retire.js

Retire.js Retire Status What you require you must also retire There are a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development, but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now ...

Inferno

ChefKiss Inferno ChefKiss Inferno is derivative of the QEMU project which provides Apple ARM device guest support. !CAUTION Please consider donating/tipping to help continue the project's development, keeping it free and open-source. PayPal or credit/debit card: https://ko-fi.com/chefkiss BTC:...

react-cve-2025-55182

CVE-2025-55182: React/Next.js Test Project Status: Experimental / Proof of Concept This repository serves as a controlled research environment and Proof-of-Concept PoC framework for analyzing CVE-2025-55182. It demonstrates a Prototype Pollution vulnerability within the context of Next.js Server...

cmsms-sqli

CMS Made Simple = 2.2.9 SQL Injection CVE-2019-9053 - Python3 Exploit Pure Python3 port of the original Exploit-DB 46635 by Daniele Scanu. Time-based blind SQLi to dump admin credentials from vulnerable CMS Made Simple installations. 🎯 Features: ✅ No external dependencies only requests ✅ Python...

cve-2026-9558-poc

CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...

Recheck

Recheck Recheck Deep scan domain and find all possible domain to takeover Quick Links Demo Installation Feature Example Run / Installation How to run ? git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start Feature Feature| Status ---|--- Deepscan domain| Ok Find Possible...

CVE-2019-13024

CVE-2019-13024 The official exploit code for Centreon v19.04 Remote Code Execution CVE-2019-13024...

WAREED-DNS-C2

Wareed DNS C2 WAREED is a Command and Control C2 that utilizes the DNS protocol for secure communications between the server and the target. Designed to minimize communication and limit data exchange, it is intended to be a first-stage C2 to persist in machines that don't have access to the...

aimap

AIMap Internet-scale discovery and security testing platform for exposed AI agent infrastructure. AIMap finds, fingerprints, and security-tests publicly exposed AI endpoints — MCP servers, Ollama instances, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes, and more. Think Shodan...

FACT_core

The Firmware Analysis and Comparison Tool FACT Contents Why FACT? Setup Usage Documentation Contribute Additional plugins Analysis Import/Export Presentations Social Acknowledgments License Why FACT? Firmware analysis can be used to achieve several interesting goals. Chief among those are...

sudo_exploit

This repository does not have a README...

Hippoo-Mobile-App-For-WooCommerce-CVE-Report

Hippoo-Mobile-App-for-WooCommerce-CVE-Report Disclosure for CVE-2025-13339 CVE-2025-13339 - Vulnerability in Hippoo Mobile App for WooCommerce This repository discloses a vulnerability discovered in Hippoo Mobile App for WooCommerce = 1.6.1,WordPress plugin developed by hippooo. 🛠 Affected Versio...

bug-free-memory

nate158 https://t.me/Nate158digimon gcloud compute addresses create google-managed-services-VPCNETWORKNAME --global --purpose=VPCPEERING --addresses=192.168.0.0 --prefix-length=16 --network=projects/PROJECTID/global/networks/VPCNETWORKNAME nate15872.wordpress.com...

Heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the online FAQ for an...

CVE-2021-3156

CVE-2021-3156 Note: These instructions are my own and notes from a stream that I did. If anything is wrong, then let me know. Trust official sources first! Hello everyone, A couple of days back, a serious heap-based buffer overflow has been discovered in sudo that is exploitable by any local user...

AzureRT

AzureRT Powershell module implementing various cmdlets to interact with Azure and Azure AD from an offensive perspective. Helpful utilities dealing with access token based authentication, switching from Az to AzureAD and az cli interfaces, easy to use pre-made attacks such as Runbook-based comman...

whoishere.py

whoishere.py WIFI Client Detection - Identify people by assigning a name to a device performing a wireless probe request...

SharpEDRChecker

SharpEDRChecker New and improved C Implementation of Invoke-EDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers...

CVE-2026-26897-EcoOnline-DeepLink

EcoOnline EHS Android — Deep Link Validation Bypass → WebView Open Redirect CVE-2026-26897 Public disclosure / advisory for CVE-2026-26897 , a deep link validation bypass in the EcoOnline EHS Android application com.airsweb.v10. A crafted ehs-app:// deep link is rewritten to https:// and loaded...

CVE-2026-82329-PoC-Exploit

CVE‑2026‑82329 – JFrog Artifactory Auth Bypass Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse A...

BiblioRCE

An oversight within BiblioCraft which allows restricted server-side file manipulation. This method only requires BiblioCraft! Not too much trickery and no other mods are required to achieve code execution! CoreTweaks The original writeup focused on CoreTweaks can be found here. I recommend you re...

PoC-Malware-TTPs

PoC-Malware-TTPs Proof of Concept Code Repository for Malware TTPs...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

SoIG

SoIG The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile. Getting Started The information includes : profile : Username, Profile Name, URL, Followers, Following, Number of Posts, Bio, Profile...

TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

Stored XSS exploit in TYPO3 HTML Sanitizer CVE-2023-47125 Description DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. Vuln versions = 1.0.0, = 2.0.0,...

evillimiter-ng

Evil Limiter Next Generation Software-blue A tool to monitor, analyze and limit the bandwidth upload/download of devices on your local network without physical or administrative access. evillimiter-ng employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. New ...

CVE-2025-48384

This repository does not have a README...

RedArrow

RedArrow3.2 - ThinkPHP 5.0.23 Remote Command Execution Tool User Guide 1. Tool Introduction RedArrow3.2 is a graphical tool for the ThinkPHP 5.0.23 remote command execution vulnerability, providing two main functions: single command execution and an interactive GodzillaShell-like interface. This...

CVE-2017-9769

https://nvd.nist.gov/vuln/detail/CVE-2017-9769 CVE-2017-9769 A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process. Reference...

Struts2_S2-062_CVE-2021-31805

Struts2S2-062CVE-2021-31805 Apache Struts2 S2-062 Remote Code Execution Vulnerability CVE-2021-31805 | Reverse Shell Vulnerability Reproduction Environment docker-compose.yml version: '2' services: struts2: image: vulhub/struts2:2.5.25 ports: - "8080:8080" Pull the image and start the environment...

totally-not-spyware

TotallyNotSpyware This program is definitely not spyware. Run it on your 64-bit iOS device as soon as possible. Your compliance will be rewarded. Live version at totally-not.spyware.lol Repo structure & building Frontend and WebKit exploit are in /root. Kernel exploit is in /glue. Post-exploitati...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...