NickstaDB / PoC
Repo for proof of concept exploits and tools.
☆56Updated 4 years ago
Alternatives and similar repositories for PoC:
Users that are interested in PoC are comparing it to the libraries listed below
- CVE-2017-10271 WEBLOGIC RCE (TESTED)☆38Updated 7 years ago
- A simple scanner to find and brute force tomcat manager logins☆28Updated 5 years ago
- Automate SSH communication with firewalls, switches, etc.☆26Updated 7 years ago
- an RCE (remote command execution) approach of CVE-2018-7750☆21Updated 6 years ago
- Parse X509 certificates to get the (sub)domains in it.☆28Updated 6 years ago
- Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)☆24Updated 5 years ago
- Win32k Elevation of Privilege Poc☆24Updated 5 years ago
- All about CVE-2018-14667; From what it is to how to successfully exploit it.☆50Updated 6 years ago
- Extension adds a new tab in Burp Suite called Extractor☆42Updated 6 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Updated 8 years ago
- A set of compiled application restriction bypasses☆29Updated 8 years ago
- Confluence Widget Connector path traversal (CVE-2019-3396)☆22Updated 5 years ago
- Remote Desktop Protocol in Twisted Python☆26Updated 7 years ago
- PoC for CVE-2019-10149, this vulnerability could be xploited betwen 4-87 to 4.91 version of Exim server.☆14Updated 5 years ago
- Data exfiltration using reflective DNS resolution covert channel☆51Updated 7 years ago
- Finally, reverse/bind shells written in python, encrypted with ssl!☆39Updated 5 years ago
- Generate pentest reports based on github issues.☆17Updated 2 years ago
- RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler☆20Updated 11 years ago
- Interactive Post Exploitation Tool☆36Updated 5 years ago
- OpenSSH <=6.6 SFTP misconfiguration universal exploit☆27Updated 7 years ago
- Disrupt WAF by abusing SSL/TLS Ciphers☆48Updated 6 years ago
- A weaponized version of CVE-2018-9206☆62Updated 6 years ago
- CVE-2019-12949☆26Updated 5 years ago
- ViewState Payload Generator☆26Updated 6 years ago
- Discovers and exploits hosts vulnerable to MS08-067/MS17-010☆41Updated 7 years ago
- Study about HQL injection exploitation.☆51Updated 8 years ago
- Burp extension for automated handling of CSRF tokens☆16Updated 7 years ago
- Modified version of ActiveScan++ Burp Suite extension☆31Updated 8 years ago
- A server vulnerable to XXE that can be used to test payloads using the xxer tool.☆26Updated 7 years ago
- Another plugin for CRLF vulnerability detection☆26Updated 8 years ago