cfreal / exploits

Related projects ⓘ

Alternatives and complementary repositories for exploits

• initstring / dirty_sock
  Linux privilege escalation exploit via snapd (CVE-2019-7304)
  ☆662Updated 5 years ago
• nongiach / sudo_inject
  [Linux] Two Privilege Escalation techniques abusing sudo token
  ☆701Updated 5 years ago
• algo7 / bluekeep_CVE-2019-0708_poc_to_exploit
  An Attempt to Port BlueKeep PoC from @Ekultek to actual exploits
  ☆344Updated 3 years ago
• orangetw / awesome-jenkins-rce-2019
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆603Updated 5 years ago
• Rhynorater / CVE-2018-15473-Exploit
  Exploit written in Python for CVE-2018-15473 with threading and export formats
  ☆520Updated 4 months ago
• kacperszurek / exploits
  ☆259Updated 5 years ago
• 0xeb-bp / bluekeep
  Public work for CVE-2019-0708
  ☆289Updated 5 years ago
• nccgroup / freddy
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆573Updated 3 years ago
• smgorelik / Windows-RCE-exploits
  The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samp…
  ☆740Updated 11 months ago
• Coalfire-Research / java-deserialization-exploits
  A collection of curated Java Deserialization Exploits
  ☆590Updated 3 years ago
• mgeeky / expdevBadChars
  Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.
  ☆203Updated 2 years ago
• mazen160 / struts-pwn_CVE-2018-11776
  An exploit for Apache Struts CVE-2018-11776
  ☆301Updated 6 years ago
• projectzeroindia / CVE-2019-11510
  Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
  ☆361Updated 4 years ago
• Bo0oM / PHP_imap_open_exploit
  Bypassing disabled exec functions in PHP (c) CRLF
  ☆400Updated 4 years ago
• ewilded / shelling
  SHELLING - a comprehensive OS command injection payload generator
  ☆438Updated 4 years ago
• kozmic / laravel-poc-CVE-2018-15133
  PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
  ☆248Updated 8 months ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆514Updated 4 years ago
• adamyordan / cve-2019-1003000-jenkins-rce-poc
  Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (…
  ☆311Updated 5 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆423Updated 4 years ago
• cyberheartmi9 / CVE-2017-12617
  Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
  ☆390Updated 7 years ago
• Frichetten / CVE-2019-5736-PoC
  PoC for CVE-2019-5736
  ☆640Updated 2 years ago
• blacknbunny / CVE-2018-10933
  Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
  ☆496Updated 11 months ago
• danigargu / CVE-2020-0796
  CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost
  ☆1,304Updated 3 years ago
• Metnew / uxss-db
  🔪Browser logic vulnerabilities
  ☆687Updated 3 years ago
• Ekultek / BlueKeep
  Proof of concept for CVE-2019-0708
  ☆1,174Updated 2 years ago
• mpgn / poodle-PoC
  Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566
  ☆251Updated last year
• eerykitty / CVE-2020-0796-PoC
  PoC for triggering buffer overflow via CVE-2020-0796
  ☆321Updated last year
• weev3 / LKWA
  Lesser Known Web Attack Lab
  ☆330Updated 4 years ago
• ly4k / SMBGhost
  Scanner for CVE-2020-0796 - SMBv3 RCE
  ☆665Updated 4 years ago