CVE-2019-10149 : A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

✭ 15

python exploit exim cve cve-2019-10149 exim-exploit 2019-10149

Exploits

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.

✭ 75

c javascript assembly HTML NASL windows firefox browser exploit asm poc ie wpad cve uaf jscript cve-2020-0674 cve-2019-17026 ionmonkey ms12-037 ms13-008 ms14-051

Scripts-Sploits

A number of scripts POC's and problems solved as pentests move along.

✭ 37

python ruby PHP powershell shell C#Batchfile builder exploit directory poc zen bruteforcing

hacker-scripts

⛷ A collection of hacker scripts.

✭ 29

python security exploit scanner

apple-knowledge

A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware

✭ 338

ruby typescript apple awesome exploit reverse-engineering

CTF

CTF binary exploit code

✭ 37

python C++rust javascript shell c exploit reverse pwn pwnable reverseing

vulristics

Extensible framework for analyzing publicly available information about vulnerabilities

✭ 46

python HTML exploit vulnerability patch cve cvss

CamOver

CamOver is a camera exploitation tool that allows to disclosure network camera admin password.

✭ 217

python iot camera exploit camera-control iot-hacking camera-hacking entysec webcam-hacking camera-exploitation

hack

Kubernetes security and vulnerability tools and utilities.

✭ 56

shell go Dockerfile c Makefile kubernetes security research tools exploit vector vulnerability

prl guest to host

Guest to host VM escape exploit for Parallels Desktop

✭ 26

C++c java exploit hypervisor vulnerability 0day not-a-bug

ProxyLogon

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

✭ 112

python exploit microsoft-exchange microsoft-exchange-server 0day zeroday proxylogon cve-2021-26855 cve-2021-27065 microsoft-exchange-proxylogon cve-2021-26855-ssrf

PwnX.py

🏴‍☠️ Pwn misconfigured sites running ShareX custom image uploader API through chained exploit

✭ 30

python http exploit tool web-shell penetration-testing rce vulnerability sharex rfi web-exploitation remote-file-inclusion remote-code-execution vulnx custom-file-uploader sharex-api pwnx custom-image-uploader

shakeitoff

Windows MSI Installer LPE (CVE-2021-43883)

✭ 68

C++c windows exploit lpe cve-2021-41379 cve-2021-43883

Axon

Unrestricted Lua Execution

✭ 59

c C++C#exploit executor roblox free rakion99 unrestricted vermillion v3rmillion

CVE-2021-41773 CVE-2021-42013

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE

✭ 20

shell exploit apache rce cve pentest payload

Python

Python Powered Repository

✭ 17

python PHP windows exploit proxy scripts trace ip exploitation anti-forensic jiofi jiofi-script facebook-multiple-videos-downloader

exploiting

Exploiting challenges in Linux and Windows

✭ 122

python c exploit exploit-exercises gdb exploits pwn ctf pwntools pwnable exploitation ctf-challenges exploit-development exploiting

k8badusb

BadUSB Teensy downexec exploit support Windows & Linux / Windows Cmd & PowerShell addUser exploit

✭ 32

C++security exploit hacking pentest badusb tennsy downexec

exploit-CVE-2015-3306

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

✭ 97

python shell docker proftpd exploit rce vulnerable-container cve-2015-3306

mRemoteNG-Decrypt

Python script to decrypt passwords stored by mRemoteNG

✭ 96

python exploit mremoteng encryption-decryption hackthebox

expdev

Vulnerable software and exploits used for OSCP/OSCE preparation

✭ 24

python ruby exploit oscp corelan osce

batchql

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

✭ 251

python graphql exploit batch

go-gtfo

gtfo, now with the speed of golang

✭ 59

go linux binaries exploit sudo gtfo suid gtfobins

Discord-Block-Bypass

Simple script that utilities discord's flaw in detecting who blocked who.

✭ 24

python api block exploit discord bug fweak block-bypass bypassed mofo

MSF-Self-Defence

Self defense post module for metasploit

✭ 18

ruby exploit defense anti-detection

CRAX

CRAX: software CRash analysis for Automatic eXploit generation

✭ 44

exploit symbolic-execution s2e aeg crax

Ultimate-Guitar-Hack

The first tool to download any Guitar Pro file, including 'Official' from Ultimate Guitar

✭ 61

music exploit ultimate-guitar

fusee-nano

A minimalist re-implementation of the Fusée Gelée exploit (http://memecpy.com), designed to run on embedded Linux devices. (Zero dependencies)

✭ 49

c Makefile shell linux usb exploit embedded-linux nintendo-switch cve-2018-6242

SubRosa

Basic tool to automate backdooring PE files

✭ 48

python backdoor exploit exploitation backdoorpython osce backdooring exploit-development shellcoding

PocOrExp in Github

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.

✭ 544

python exploit poc vulnerabilities cve

CVE-2019-8449

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

✭ 66

python jira exploit exploits jira-issue vulnerability cve jira-rest-api exploit-database jira-api exploiting-vulnerabilities exploit-code exploitdb cve-exploit cve-2019-8449

DoubleStar

A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own techniques

✭ 140

javascript c assembly firefox apt exploit chain jit rpc pac wpad star double eop alpc cve-2020-0674 cve-2019-17026 darkhotel

pwn-pulse

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

✭ 126

shell exploit penetration-testing infosec pentesting cve red-team pentest-scripts security-tools

241-300 of 343 exploit projects

first

‹

›