Every new exploit,
on the radar.

Exploit for CVE-2019-19609 in Strapi (Remote Code Execution)

Strapi Framework Vulnerable to Remote Code Execution

Strapi CMS 3.0.0-beta.17.4 - Unauthenticated Remote Code Execution (CVE-2019-18818, CVE-2019-19609)

Strapi <= 3.0.0-beta.17.8 authenticated remote code execution

Strapi Remote Code Execution

Strapi Framework, 3.0.0-beta.17.4

CVE-2020-8554: Man in the middle using LoadBalancer or ExternalIPs

Mitigate CVE-2020-8554 with Policy Controller in Anthos

Prisma Cloud Compute Admission rules to mitigate Kubernetes CVE-2020-8554

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

Weblogic coherence.jar RCE

Proof of concept for Weblogic CVE-2020-2883

CVE-2020-2883

适配12.2.1.3和12.2.1.4版本

POC for CVE-2020-2883

Check Git's vulnerability CVE-2017-1000117

Proof of concept of CVE-2017-1000117

CVE-2017-1000117漏洞复现（PoC+Exp）

GitのCommand Injectionの脆弱性を利用してスクリプトを落として実行する例

Unrestricted file upload in Adobe ColdFusion

Exploit for CVE-2018-15961, a unrestricted file upload vulnerability in Adobe ColdFusion 2018 leading to RCE

CVE-2018-15961 — ᴀᴅᴏʙᴇ ᴄᴏʟᴅғᴜsɪᴏɴ (ʀᴄᴇ)

cve-2018-15961

django 漏洞：CVE-2020-7471 Potential SQL injection via StringAgg(delimiter) 的漏洞环境和 POC

Django StringAgg SQL Injection (CVE-2020-7471)

CVE-2020-7471 Potential SQL injection via StringAgg(delimiter)

PoC for the SQL injection vulnerability in PostgreSQL with Django, found in Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3

Reproduce CVE-2020-7471

CVE-2017-5689 Proof-of-Concept exploit

simple python poc for CVE-2017-5689

Honeypot for Intel's AMT Firmware Vulnerability CVE-2017-5689

CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp

CVE-2021-26295 Apache OFBiz rmi反序列化POC

CVE-2021-26295 EXP 可成功反弹Shell

CVE-2021-26295-POC 利用DNSlog进行CVE-2021-26295的漏洞验证。 使用 poc：将目标放于target.txt后运行python poc.py即可。（Jdk环境需<12，否则ysoserial无法正常生成有效载荷） exp：python exp.py https://baidu.…

GitLab 12.9.0 Arbitrary File Read

Exploit for "GitLab Instance" Arbitrary server file read vulnerability

Gitlab v12.4.0-8.1 RCE

GitLab Arbitrary File Read Exploit

cve-2020-10977 read and execute

authenticated arbitrary file read for Gitlab (CVE-2020-10977)

A (wanted to be) better script than what can be found on exploit-db about the authenticated arbitrary read file on GitLab v12.9.0 (CVE-2020-10977)

GitLab 12.9 Arbitrary File Read

Aggressor Script to launch IE driveby for CVE-2018-4878

Flash Exploit Poc

Metasploit module for CVE-2018-4878

备忘：flash挂马工具备份 CVE-2018-4878

软件系统安全结课作业：[漏洞复现] CVE-2018-4878 Flash 0day

Aggressor Script to just launch IE driveby for CVE-2018-4878

CVE-2018-4878 样本

Basic BASH Script to Automate OpenSSL based testing for FREAK Attack (CVE-2015-0204) as advised by Akamai.

A2SV = Auto Scanning to SSL Vulnerability HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc Support Vulnerability [CVE-2007-1858] Anonymous Cipher [CVE-201…

Multithreaded FREAK scanner, used to detect SSL EXP Ciphers, vulnerable to CVE-2015-0204

This script check if your list of server is accepting Export cipher suites and could be vulnerable to CVE-2015-0204

Weblogic CVE-2020-14645 UniversalExtractor JNDI injection getDatabaseMetaData()

Weblogic Server CVE-2020-14645 EXP for Python （complete in one step）

环境下载

Weblogic CVE-2020-14645 coherence 反序列化漏洞验证程序

CVE-2018-8120 Windows LPE exploit

CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7

dd

CVE-2018-8120 Windows LPE exploit

Proof of Concept exploit for CVE-2017-8570

ppsx file generator for cve-2017-8570 (based on bhdresh/cve-2017-8570)

CVE-2017-8570生成脚本(CVE-2017-0199另一种利用方式)

## 在kali中自动化生成cve-2017-8570的恶意ppsx文件和配置msf监听

CVE-2017-8570 Exp改造及样本分析

exp of CVE-2018-15982

Aggressor Script to launch IE driveby for CVE-2018-15982.

CVE-2018-15982_PoC

CVE-2018-15982_EXP_IE

Script and metasploit module for CVE-2018-15982

Flash 2018-15982 UAF

Flash sources for CVE-2018-15982 used by NK

CVE-2019-2890 WebLogic 反序列化RCE漏洞

CVE-2015-4852、CVE-2016-0638、CVE-2016-3510、CVE-2019-2890漏洞POC

CVE-2019-2890 Exploit for WebLogic with T3

0-sec.org

Clone code from https://github.com/v-gift/CVE-2019-2890

weblogic_cve-2019-2890

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .N…

Running CVE-2017-8759 exploit sample.

CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.

NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements

Simple C# implementation of CVE-2017-8759

Two versions of CVE-2017-8759 exploits

CVE-2017-8759 Research

CVE-2017-8759 Remote Code Execution Vulnerability On SOAP WDSL - Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 3.5.1…

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

2018年1月2日 (CVE-2017-5753 和 CVE-2017-5715) "幽灵" Spectre 漏洞利用

The demo of the speculative execution attack Spectre (CVE-2017-5753, CVE-2017-5715).

Spectre (CVE-2017-5753) (CVE-2017-5715). Not By Me. Collected from Book.

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

OSX 10.13.2, CVE-2017-5753, Spectre, PoC, C, ASM for OSX, MAC, Intel Arch, Proof of Concept, Hopper.App Output

PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure

PoC exploit code for CVE-2015-5477 BIND9 TKEY remote DoS vulnerability

Vulnerability as a service: showcasing CVS-2015-5447, a DDoS condition in the bind9 software

PoC for BIND9 TKEY assert DoS (CVE-2015-5477)

PoC exploit for CVE-2015-5477 in php

Exploit code for CVE-2015-5477 POC

Ansible playbook to check vulnerability for CVE-2015-0235

Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security

A shared library wrapper with additional checks for vulnerable functions gethostbyname2_r gethostbyname_r (GHOST vulnerability)

CVE-2015-0235 EXIM ESTMP GHOST Glibc Gethostbyname() DoS Exploit/PoC

A chef cookbook to test the GHOST vulnerability

Ansible playbook, to check for CVE-2015-0235 (GHOST) vulnerability

gethostbyname*() buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability

SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), …

Meltdown Exploit / Proof-of-concept / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.

This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown)…

Proof-of-concept / Exploit / checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a

Naive shell script to verify Meltdown (CVE-2017-5754) patch status of EC2 instances

PoC for Meltdown in linux (CVE-2017-5754)

Weblogic-CVE-2018-3191远程代码命令执行漏洞

CVE-2018-3191 反弹shell

CVE-2018-3191-PoC

CVE-2018-3191 payload generator

An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit

A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.

porting CVE-2016-7255 to x86 for educational purposes.

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

credit to artkond

Cisco Catalyst Remote Code Execution PoC

Proof of Concept code for CVE-2016-5696

Proof-of-concept exploit code for CVE-2016-5696

A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous

Daemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696

global rate-limiting in Linux (CVE-2016-5696) scanner