NickstaDB / PoC
Repo for proof of concept exploits and tools.
☆56Updated 4 years ago
Alternatives and similar repositories for PoC:
Users that are interested in PoC are comparing it to the libraries listed below
- A simple scanner to find and brute force tomcat manager logins☆28Updated 5 years ago
- Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)☆24Updated 5 years ago
- CVE-2017-10271 WEBLOGIC RCE (TESTED)☆38Updated 7 years ago
- A weaponized version of CVE-2018-9206☆62Updated 6 years ago
- Automate SSH communication with firewalls, switches, etc.☆26Updated 6 years ago
- Disrupt WAF by abusing SSL/TLS Ciphers☆48Updated 6 years ago
- All about CVE-2018-14667; From what it is to how to successfully exploit it.☆50Updated 6 years ago
- Another plugin for CRLF vulnerability detection☆26Updated 8 years ago
- CVE-2020-12828 PoC and Analysis.☆28Updated 4 years ago
- Win32k Elevation of Privilege Poc☆24Updated 5 years ago
- OpenSSH <=6.6 SFTP misconfiguration universal exploit☆27Updated 7 years ago
- Scan for open S3 buckets and dump☆36Updated 7 years ago
- Metasploit Framework☆31Updated 5 years ago
- Essential tool for finding blind injection attacks.☆50Updated 6 years ago
- Proof of concept showing how to exploit the CVE-2018-11759☆41Updated 6 years ago
- Study about HQL injection exploitation.☆51Updated 8 years ago
- A front-end JavaScript toolkit for creating DNS rebinding attacks.☆45Updated 6 years ago
- Discovers and exploits hosts vulnerable to MS08-067/MS17-010☆41Updated 7 years ago
- RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler☆20Updated 11 years ago
- Custom THP Dropper☆26Updated 7 years ago
- Ping Exfiltration Command and Control (PiX-C2)☆30Updated 9 years ago
- A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commo…☆46Updated 2 years ago
- Finally, reverse/bind shells written in python, encrypted with ssl!☆39Updated 5 years ago
- New Found 0-days!☆36Updated 5 years ago
- Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.☆48Updated 4 years ago
- Automated information gathering tool for pentest☆54Updated 8 years ago
- an RCE (remote command execution) approach of CVE-2018-7750☆21Updated 6 years ago
- Python script to exploit CVE-2015-4852.☆30Updated 8 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆34Updated 8 years ago
- A burp extension to generate sqlmap PoC from target HTTP request.☆28Updated 8 years ago