k1n9 / CVE-2019-0604
☆51Updated this week
Related projects: ⓘ
- CVE-2017-10271 WEBLOGIC RCE (TESTED)☆37Updated 6 years ago
- ☆70Updated this week
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Updated 7 years ago
- PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM☆52Updated 6 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Updated 7 years ago
- Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.☆57Updated 6 years ago
- ☆34Updated 5 years ago
- Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls☆42Updated 8 years ago
- A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.☆42Updated 5 years ago
- This is a filter bypass exploit that results in arbitrary file upload and remote code execution in class.upload.php <= 2.0.4☆36Updated 4 years ago
- Python api for usage with cobalt strike's External C2 specification☆61Updated 5 years ago
- All about CVE-2018-14667; From what it is to how to successfully exploit it.☆47Updated 5 years ago
- A weaponized version of CVE-2018-9206☆62Updated 5 years ago
- Win32k Elevation of Privilege Poc☆24Updated 5 years ago
- sploit☆67Updated 4 years ago
- Proof of concept showing how to exploit the CVE-2018-11759☆41Updated 5 years ago
- CVE-2018-6546-Exploit☆41Updated 6 years ago
- ☆20Updated this week
- Python script to exploit CVE-2015-4852.☆29Updated 8 years ago
- Another plugin for CRLF vulnerability detection☆26Updated 7 years ago
- ☆44Updated 4 years ago
- A front-end JavaScript toolkit for creating DNS rebinding attacks.☆45Updated 6 years ago
- Learn how to get a reverse shell from JIRA application server☆24Updated 5 years ago
- XSS payloads for edge cases☆34Updated 5 years ago
- Remote Desktop Protocol in Twisted Python☆26Updated 6 years ago
- CVE-2018-8021 Proof-Of-Concept and Exploit☆106Updated 5 years ago
- Slide deck for DefCon Beijing☆39Updated 6 years ago
- ☆26Updated this week
- A tool to analyse JMX API security level.☆43Updated 10 years ago
- CVE-2019-12949☆26Updated 5 years ago