This repo is a PoC with to exploit CVE-2023-51467 and CVE-2023-49070 preauth RCE vulnerabilities found in Apache OFBiz.
☆73Mar 24, 2024Updated 2 years ago
Alternatives and similar repositories for Apache-OFBiz-Authentication-Bypass
Users that are interested in Apache-OFBiz-Authentication-Bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13May 18, 2022Updated 4 years ago
- CVE-2023-0297: The Story of Finding Pre-auth RCE in pyLoad☆27Jan 14, 2023Updated 3 years ago
- Joomla! < 4.2.8 - Unauthenticated information disclosure☆95Dec 27, 2023Updated 2 years ago
- Ghostscript command injection vulnerability PoC (CVE-2023-36664)☆131Sep 7, 2023Updated 3 years ago
- This is a exploit of CVE-2022-46169 to cacti 1.2.22. This exploit allows through an RCE to obtain a reverse shell on your computer.☆42Sep 11, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit☆41Nov 2, 2023Updated 3 years ago
- A proof of concept for CVE-2023–1326 in apport-cli 2.26.0☆21Dec 6, 2023Updated 2 years ago
- CVE-2022-25765 pdfkit <0.8.6 command injection.☆16Dec 21, 2022Updated 3 years ago
- Python exploit for vsftpd 2.3.4 - Backdoor Command Execution☆15Jan 8, 2023Updated 3 years ago
- Making your own CTF☆26Jan 5, 2021Updated 5 years ago
- ☆14Jun 29, 2023Updated 3 years ago
- ☆41Nov 6, 2023Updated 3 years ago
- A simple python script that will generate 2-6 machine names from the now infamous "Lainkusanagi & TJ Null OSCP trophy list".☆13Aug 1, 2024Updated 2 years ago
- A Python script for generating exploits targeting CVE-2022-4510 RCE Binwalk. It supports SSH, command execution, and reverse shell option…☆14Jun 27, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆60Dec 15, 2023Updated 2 years ago
- Spring Cloud Function Vulnerable Application / CVE-2022-22963☆19Apr 1, 2022Updated 4 years ago
- POC for CVE-2021-41091☆66May 20, 2023Updated 3 years ago
- SAP Penetration Testing: A Comprehensive Analysis of SAP Security Issues☆41Nov 23, 2023Updated 2 years ago
- ImageMagick LFI PoC [CVE-2022-44268]☆53Nov 6, 2023Updated 3 years ago
- Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.☆75Oct 29, 2021Updated 5 years ago
- A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read☆218Mar 24, 2025Updated last year
- Original PoC for CVE-2023-32784☆650Aug 17, 2023Updated 3 years ago
- Reverse Shell Exploit for Searchor <= 2.4.2 (2.4.0)☆18May 27, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CVE-2023-2255 Libre Office☆66Jul 10, 2023Updated 3 years ago
- retrieve comprehensive information about a website, including its title, last modified date, DNS information, subdomains, firewall names,…☆18Mar 24, 2024Updated 2 years ago
- Joomla login bruteforce☆141Jul 18, 2024Updated 2 years ago
- A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate f…☆84Nov 3, 2025Updated last year
- ☆29Sep 7, 2025Updated last year
- CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script w…☆24Mar 18, 2023Updated 3 years ago
- PHP 8.1.0-dev Backdoor System Shell Script☆95Jun 6, 2021Updated 5 years ago
- All of Your Copy/Paste Belong to Us: Stealing the clipboard and using it for C2 communications☆91Feb 21, 2019Updated 7 years ago
- A couple of different scripts, made to automate attacks against NoSQL databases.☆66Mar 13, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 目前通过自学已经取得 OSCP（Offensive Security Certified Professional）证书，本项目用于记录、分享、交流。☆12Aug 16, 2022Updated 4 years ago
- A python polymorphic engine for C programs☆11Dec 8, 2023Updated 2 years ago
- Werkzeug password cracker☆21Nov 14, 2024Updated last year
- ☆223Jan 12, 2026Updated 9 months ago
- Rehashing APIs to prevent hash based detection☆14Jan 7, 2025Updated last year
- Proof of conept to exploit vulnerable proxycommand configurations on ssh clients☆18Dec 21, 2023Updated 2 years ago
- A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1☆20Mar 19, 2024Updated 2 years ago