Skip to content
/ TOP Public
forked from GhostTroops/TOP

TOP All bugbounty pentesting CVE-2022- POC Exp RCE example payload Things

Notifications You must be signed in to change notification settings

Hax0rG1rl/TOP

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

352 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Tweet Follow on Twitter GitHub Followers Top Langs

TOP

all Top Top Top_Codeql TOP All bugbounty pentesting CVE-2022- POC Exp Things

Table of Contents

2022

star updated_at name url des
375 2022-12-14T05:42:09Z pxplan https://github.com/GREENHAT7/pxplan CVE-2022-2022
410 2022-12-15T10:17:03Z CVE-2022-25636 https://github.com/Bonfee/CVE-2022-25636 CVE-2022-25636
490 2022-12-09T21:41:25Z CVE-2022-0995 https://github.com/Bonfee/CVE-2022-0995 CVE-2022-0995 exploit
441 2022-12-12T18:36:33Z CVE-2022-21882 https://github.com/KaLendsi/CVE-2022-21882 win32k LPE
536 2022-12-06T21:48:41Z OpenSSL-2022 https://github.com/NCSC-NL/OpenSSL-2022 Operational information regarding CVE-2022-3602 and CVE-2022-3786, two vulnerabilities in OpenSSL 3
674 2022-12-05T16:00:54Z CVE-2022-29072 https://github.com/kagancapar/CVE-2022-29072 7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>Contents area.
999 2022-12-15T22:47:37Z CVE-2022-0847-DirtyPipe-Exploit https://github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit A root exploit for CVE-2022-0847 (Dirty Pipe)
347 2022-12-07T04:24:45Z CVE-2022-0185 https://github.com/Crusaders-of-Rust/CVE-2022-0185 CVE-2022-0185
198 2022-12-21T09:22:25Z Spring-Cloud-Gateway-CVE-2022-22947 https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947 CVE-2022-22947
515 2022-12-21T16:57:01Z CVE-2022-23222 https://github.com/tr3ee/CVE-2022-23222 CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation
365 2022-11-30T04:58:31Z CVE-2022-21907 https://github.com/ZZ-SOCMAP/CVE-2022-21907 HTTP Protocol Stack Remote Code Execution Vulnerability CVE-2022-21907
392 2022-12-22T15:25:32Z CVE-2022-2588 https://github.com/Markakd/CVE-2022-2588 exploit for CVE-2022-2588
293 2022-12-14T14:51:46Z CVE-2022-40684 https://github.com/horizon3ai/CVE-2022-40684 A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager
333 2022-12-21T21:06:50Z CVE-2022-29464 https://github.com/hakivvi/CVE-2022-29464 WSO2 RCE (CVE-2022-29464) exploit and writeup.
289 2022-12-15T03:49:05Z CVE-2022-39197 https://github.com/its-arun/CVE-2022-39197 CobaltStrike <= 4.7.1 RCE
409 2022-12-14T13:07:50Z CVE-2022-27254 https://github.com/nonamecoder/CVE-2022-27254 PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)
219 2022-12-10T07:40:11Z CVE-2022-0847 https://github.com/r1is/CVE-2022-0847 CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞,可覆盖重写任意可读文件中的数据,从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞(Dirty Cow),但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”
328 2022-12-18T13:59:43Z CVE-2022-33679 https://github.com/Bdenneu/CVE-2022-33679 One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html
285 2022-12-12T18:36:34Z CVE-2022-21971 https://github.com/0vercl0k/CVE-2022-21971 PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"
272 2022-12-05T19:03:25Z Spring4Shell-POC https://github.com/reznok/Spring4Shell-POC Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit
231 2022-12-07T22:03:20Z CVE-2022-1388 https://github.com/horizon3ai/CVE-2022-1388 POC for CVE-2022-1388
284 2022-11-30T04:46:02Z VMware-CVE-2022-22954 https://github.com/sherlocksecurity/VMware-CVE-2022-22954 POC for VMWARE CVE-2022-22954
104 2022-12-08T07:24:23Z CVE-2022-22963 https://github.com/dinosn/CVE-2022-22963 CVE-2022-22963 PoC
363 2022-12-17T15:14:34Z CVE-2022-0847-DirtyPipe-Exploits https://github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.
93 2022-11-22T01:37:24Z zabbix-saml-bypass-exp https://github.com/jweny/zabbix-saml-bypass-exp cve-2022-23131 exp
191 2022-12-06T03:17:20Z CVE-2022-27666 https://github.com/plummm/CVE-2022-27666 Exploit for CVE-2022-27666
183 2022-11-30T17:36:02Z CVE-2022-0778 https://github.com/drago-96/CVE-2022-0778 Proof of concept for CVE-2022-0778, which triggers an infinite loop in parsing X.509 certificates due to a bug in BN_mod_sqrt
117 2022-12-09T10:24:08Z SpringShell https://github.com/TheGejr/SpringShell Spring4Shell - Spring Core RCE - CVE-2022-22965
237 2022-11-12T14:47:29Z CVE-2022-20699 https://github.com/Audiobahn/CVE-2022-20699 Cisco Anyconnect VPN unauth RCE (rwx stack)
180 2022-11-16T11:56:09Z CVE-2022-21882 https://github.com/L4ys/CVE-2022-21882

2021

star updated_at name url des
1723 2022-12-20T03:03:29Z CVE-2021-4034 https://github.com/berdav/CVE-2021-4034 CVE-2021-4034 1day
1451 2022-12-09T16:51:28Z CVE-2021-40444 https://github.com/lockedbyte/CVE-2021-40444 CVE-2021-40444 PoC
1162 2022-12-20T13:42:07Z noPac https://github.com/cube0x0/noPac CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
1635 2022-12-20T19:18:09Z CVE-2021-1675 https://github.com/cube0x0/CVE-2021-1675 C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527
933 2022-12-22T11:20:14Z CVE-2021-4034 https://github.com/arthepsy/CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)
417 2022-12-08T03:03:39Z CVE-2021-21972 https://github.com/NS-Sp4ce/CVE-2021-21972 CVE-2021-21972 Exploit
847 2022-12-22T18:16:07Z CVE-2021-3156 https://github.com/blasty/CVE-2021-3156
391 2022-12-13T05:56:18Z CVE-2021-1732-Exploit https://github.com/KaLendsi/CVE-2021-1732-Exploit CVE-2021-1732 Exploit
864 2022-12-21T09:29:34Z CVE-2021-1675 https://github.com/calebstewart/CVE-2021-1675 Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
867 2022-12-22T08:45:13Z sam-the-admin https://github.com/WazeHell/sam-the-admin Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
838 2022-12-14T19:31:34Z CVE-2021-44228-Scanner https://github.com/logpresso/CVE-2021-44228-Scanner Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
719 2022-12-22T18:26:18Z CVE-2021-40444 https://github.com/klezVirus/CVE-2021-40444 CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
820 2022-12-18T08:16:24Z CVE-2021-31166 https://github.com/0vercl0k/CVE-2021-31166 Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.
556 2022-12-07T09:42:18Z CVE-2021-3156 https://github.com/worawit/CVE-2021-3156 Sudo Baron Samedit Exploit
1516 2022-12-22T10:51:56Z log4j-shell-poc https://github.com/kozmer/log4j-shell-poc A Proof-Of-Concept for the CVE-2021-44228 vulnerability.
1031 2022-12-14T09:02:58Z log4shell-vulnerable-app https://github.com/christophetd/log4shell-vulnerable-app Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).
432 2022-12-16T07:13:10Z CVE-2021-3156 https://github.com/stong/CVE-2021-3156 PoC for CVE-2021-3156 (sudo heap overflow)
327 2022-12-17T06:22:20Z CVE-2021-3493 https://github.com/briskets/CVE-2021-3493 Ubuntu OverlayFS Local Privesc
492 2022-12-22T08:43:04Z noPac https://github.com/Ridter/noPac Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
130 2022-12-15T01:47:32Z exprolog https://github.com/herwonowr/exprolog ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)
343 2022-12-09T22:14:13Z CVE-2021-44228_scanner https://github.com/CERTCC/CVE-2021-44228_scanner Scanners for Jar files that may be vulnerable to CVE-2021-44228
206 2022-12-04T11:28:17Z CVE-2021-41773 https://github.com/blasty/CVE-2021-41773 CVE-2021-41773 playground
335 2022-12-04T15:05:06Z CVE-2021-1675-LPE https://github.com/hlldz/CVE-2021-1675-LPE Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527
156 2022-12-12T01:03:32Z ProxyVulns https://github.com/hosch3n/ProxyVulns [ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.
139 2022-12-08T12:21:45Z CVE-2021-41773_CVE-2021-42013 https://github.com/inbug-team/CVE-2021-41773_CVE-2021-42013 CVE-2021-41773 CVE-2021-42013漏洞批量检测工具
228 2022-11-25T12:38:02Z laravel-exploits https://github.com/ambionics/laravel-exploits Exploit for CVE-2021-3129
431 2022-12-22T18:26:18Z log4j-finder https://github.com/fox-it/log4j-finder Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)
292 2022-12-22T02:33:31Z CVE-2021-26084_Confluence https://github.com/h3v0x/CVE-2021-26084_Confluence Confluence Server Webwork OGNL injection
299 2022-12-22T07:13:46Z Grafana-CVE-2021-43798 https://github.com/jas502n/Grafana-CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability
211 2022-11-30T04:46:46Z CVE-2021-22205 https://github.com/Al1ex/CVE-2021-22205 CVE-2021-22205& GitLab CE/EE RCE

2020

star updated_at name url des
3643 2022-12-22T18:26:17Z exphub https://github.com/zhzyker/exphub Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
1561 2022-12-22T18:26:16Z weblogicScanner https://github.com/0xn0ne/weblogicScanner weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
1533 2022-12-22T08:31:35Z CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472 Test tool for CVE-2020-1472
1225 2022-12-16T14:36:50Z CVE-2020-0796 https://github.com/danigargu/CVE-2020-0796 CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost
986 2022-12-20T14:10:42Z CVE-2020-1472 https://github.com/dirkjanm/CVE-2020-1472 PoC for Zerologon - all research credits go to Tom Tervoort of Secura
268 2022-12-14T15:41:48Z CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 CVE-2020–14882、CVE-2020–14883
305 2022-12-14T23:12:53Z cve-2020-0688 https://github.com/Ridter/cve-2020-0688 cve-2020-0688
628 2022-12-01T21:09:43Z SMBGhost https://github.com/ly4k/SMBGhost Scanner for CVE-2020-0796 - SMBv3 RCE
371 2022-10-19T14:34:52Z CVE-2020-5902 https://github.com/jas502n/CVE-2020-5902 CVE-2020-5902 BIG-IP
129 2022-11-09T18:06:33Z CVE_2020_2546 https://github.com/hktalent/CVE_2020_2546 CVE-2020-2546,CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc python3,
481 2022-12-02T07:33:59Z CVE-2020-0796-RCE-POC https://github.com/ZecOps/CVE-2020-0796-RCE-POC CVE-2020-0796 Remote Code Execution POC
297 2022-12-07T03:42:01Z CVEAC-2020 https://github.com/thesecretclub/CVEAC-2020 EasyAntiCheat Integrity check bypass by mimicking memory changes
497 2022-12-19T06:18:23Z zerologon https://github.com/risksense/zerologon Exploit for zerologon cve-2020-1472
305 2022-11-18T01:24:53Z CVE-2020-2551 https://github.com/Y4er/CVE-2020-2551 Weblogic IIOP CVE-2020-2551
650 2022-12-22T12:51:29Z CVE-2020-0787-EXP-ALL-WINDOWS-VERSION https://github.com/cbwang505/CVE-2020-0787-EXP-ALL-WINDOWS-VERSION Support ALL Windows Version
331 2022-12-04T04:04:38Z CVE-2020-0688 https://github.com/zcgonvh/CVE-2020-0688 Exploit and detect tools for CVE-2020-0688
293 2022-12-19T01:43:25Z CVE-2020-0796-PoC https://github.com/eerykitty/CVE-2020-0796-PoC PoC for triggering buffer overflow via CVE-2020-0796
876 2022-12-13T06:40:59Z CurveBall https://github.com/ly4k/CurveBall PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)
110 2022-11-09T18:07:35Z CVE-2020-11651-poc https://github.com/jasperla/CVE-2020-11651-poc PoC exploit of CVE-2020-11651 and CVE-2020-11652
157 2022-11-09T18:06:27Z cve-2020-0688 https://github.com/random-robbie/cve-2020-0688 cve-2020-0688
276 2022-11-09T18:06:22Z CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner https://github.com/bkfish/CNVD-2020-10487-Tomcat-Ajp-lfi-Scanner Cnvd-2020-10487 / cve-2020-1938, scanner tool
80 2022-11-28T12:45:16Z dnspooq https://github.com/knqyf263/dnspooq DNSpooq - dnsmasq cache poisoning (CVE-2020-25686, CVE-2020-25684, CVE-2020-25685)
254 2022-11-09T18:06:01Z BlueGate https://github.com/ly4k/BlueGate PoC (DoS + scanner) for CVE-2020-0609 & CVE-2020-0610 - RD Gateway RCE
221 2022-11-26T00:40:58Z CVE-2020-0674-Exploit https://github.com/maxpl0it/CVE-2020-0674-Exploit This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.
323 2022-12-11T01:58:23Z CVE-2020-1472 https://github.com/VoidSec/CVE-2020-1472 Exploit Code for CVE-2020-1472 aka Zerologon
341 2022-11-30T10:20:15Z chainoffools https://github.com/kudelskisecurity/chainoffools A PoC for CVE-2020-0601
240 2022-11-09T18:06:58Z CVE-2020-0796-LPE-POC https://github.com/ZecOps/CVE-2020-0796-LPE-POC CVE-2020-0796 Local Privilege Escalation POC
316 2022-12-22T20:17:53Z CVE-2020-0683 https://github.com/padovah4ck/CVE-2020-0683 CVE-2020-0683 - Windows MSI “Installer service” Elevation of Privilege
200 2022-12-20T17:12:01Z SAP_RECON https://github.com/chipik/SAP_RECON PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)
198 2022-12-14T15:58:23Z CVE-2020-0041 https://github.com/bluefrostsecurity/CVE-2020-0041 Exploits for Android Binder bug CVE-2020-0041

2019

star updated_at name url des
1561 2022-12-22T18:26:16Z weblogicScanner https://github.com/0xn0ne/weblogicScanner weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
1751 2022-12-20T10:57:38Z phuip-fpizdam https://github.com/neex/phuip-fpizdam Exploit for CVE-2019-11043
3643 2022-12-22T18:26:17Z exphub https://github.com/zhzyker/exphub Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
1122 2022-12-15T05:57:32Z BlueKeep https://github.com/Ekultek/BlueKeep Proof of concept for CVE-2019-0708
600 2022-12-10T19:54:47Z CVE-2019-5736-PoC https://github.com/Frichetten/CVE-2019-5736-PoC PoC for CVE-2019-5736
480 2022-11-09T18:03:22Z CVE-2019-0708 https://github.com/n1xbyte/CVE-2019-0708 dump
377 2022-11-14T11:48:53Z CVE-2019-0708 https://github.com/k8gege/CVE-2019-0708 3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)
311 2022-12-06T08:10:46Z COMahawk https://github.com/apt69/COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322
314 2022-11-09T18:03:51Z CVE-2019-2107 https://github.com/marcinguy/CVE-2019-2107 CVE-2019-2107
426 2022-12-18T04:09:30Z CVE-2019-2725 https://github.com/lufeirider/CVE-2019-2725 CVE-2019-2725 命令回显
557 2022-11-22T12:41:11Z cve-2019-19781 https://github.com/trustedsec/cve-2019-19781 This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.
748 2022-12-12T04:29:45Z esp32_esp8266_attacks https://github.com/Matheus-Garbelini/esp32_esp8266_attacks Proof of Concept of ESP32/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)
358 2022-11-29T19:35:27Z CVE-2019-11510 https://github.com/projectzeroindia/CVE-2019-11510 Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
370 2022-12-02T09:04:46Z CVE-2019-19781 https://github.com/projectzeroindia/CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]
604 2022-12-04T18:52:23Z CVE-2019-11708 https://github.com/0vercl0k/CVE-2019-11708 Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.
295 2022-12-02T09:30:12Z CVE-2019-13272 https://github.com/jas502n/CVE-2019-13272 Linux 4.10 < 5.1.17 PTRACE_TRACEME local root
133 2022-12-16T10:14:29Z CVE-2019-0604 https://github.com/linhlhq/CVE-2019-0604 CVE-2019-0604
236 2022-10-04T23:08:51Z CVE-2019-0841 https://github.com/rogue-kdc/CVE-2019-0841 PoC code for CVE-2019-0841 Privilege Escalation vulnerability
873 2022-12-15T13:00:12Z rdpscan https://github.com/robertdavidgraham/rdpscan A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.
187 2022-12-21T14:31:46Z CVE-2019-11932 https://github.com/awakened1712/CVE-2019-11932 Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif
258 2022-11-15T17:36:27Z CVE-2019-5786 https://github.com/exodusintel/CVE-2019-5786 FileReader Exploit
258 2022-12-12T09:01:33Z CVE-2019-11932 https://github.com/dorkerdevil/CVE-2019-11932 double-free bug in WhatsApp exploit poc
254 2022-12-20T05:36:26Z CVE-2019-18935 https://github.com/noperator/CVE-2019-18935 RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.
230 2022-11-30T04:46:24Z CVE-2019-1040 https://github.com/Ridter/CVE-2019-1040 CVE-2019-1040 with Exchange
170 2022-11-18T10:10:10Z CVE-2019-3396_EXP https://github.com/Yt1g3r/CVE-2019-3396_EXP CVE-2019-3396 confluence SSTI RCE
347 2022-09-26T14:46:00Z bluekeep_CVE-2019-0708_poc_to_exploit https://github.com/algo7/bluekeep_CVE-2019-0708_poc_to_exploit An Attempt to Port BlueKeep PoC from @Ekultek to actual exploits
292 2022-08-26T13:16:46Z bluekeep https://github.com/0xeb-bp/bluekeep Public work for CVE-2019-0708
201 2022-12-05T21:28:33Z cve-2019-5736-poc https://github.com/q3k/cve-2019-5736-poc Unweaponized Proof of Concept for CVE-2019-5736 (Docker escape)
297 2022-12-17T16:04:03Z cve-2019-1003000-jenkins-rce-poc https://github.com/adamyordan/cve-2019-1003000-jenkins-rce-poc Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)
178 2022-11-09T18:03:33Z CVE-2019-2725 https://github.com/TopScrew/CVE-2019-2725 CVE-2019-2725命令回显+webshell上传+最新绕过

2018

star updated_at name url des
1561 2022-12-22T18:26:16Z weblogicScanner https://github.com/0xn0ne/weblogicScanner weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
486 2022-11-15T17:34:00Z CVE-2018-8120 https://github.com/unamer/CVE-2018-8120 CVE-2018-8120 Windows LPE exploit
485 2022-12-10T03:22:40Z CVE-2018-20250 https://github.com/WyAtu/CVE-2018-20250 exp for https://research.checkpoint.com/extracting-code-execution-from-winrar
501 2022-12-14T15:27:38Z CVE-2018-15473-Exploit https://github.com/Rhynorater/CVE-2018-15473-Exploit Exploit written in Python for CVE-2018-15473 with threading and export formats
481 2022-12-16T23:04:15Z CVE-2018-9995_dvr_credentials https://github.com/ezelf/CVE-2018-9995_dvr_credentials (CVE-2018-9995) Get DVR Credentials
348 2022-12-05T10:42:24Z Exchange2domain https://github.com/Ridter/Exchange2domain CVE-2018-8581
488 2022-11-06T21:07:20Z CVE-2018-10933 https://github.com/blacknbunny/CVE-2018-10933 Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)
248 2022-11-26T17:28:55Z CVE-2018-13379 https://github.com/milo2012/CVE-2018-13379 CVE-2018-13379
405 2022-11-21T13:18:02Z CVE-2018-8897 https://github.com/can1357/CVE-2018-8897 Arbitrary code execution with kernel privileges using CVE-2018-8897.
266 2022-12-02T09:30:11Z CVE-2018-0802 https://github.com/rxwx/CVE-2018-0802 PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
342 2022-12-12T15:30:26Z CVE-2018-7600 https://github.com/a2u/CVE-2018-7600 💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002
291 2022-11-09T18:00:12Z CVE-2018-8120 https://github.com/alpha1ab/CVE-2018-8120 CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7
331 2022-12-15T07:31:09Z CVE-2018-8581 https://github.com/WyAtu/CVE-2018-8581 CVE-2018-8581
79 2022-07-29T07:40:46Z CVE-2018-2628 https://github.com/shengqi158/CVE-2018-2628 CVE-2018-2628 & CVE-2018-2893
477 2022-12-08T13:17:06Z WinboxPoC https://github.com/BasuCert/WinboxPoC Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
137 2022-08-04T05:22:18Z CVE-2018-8174_EXP https://github.com/Yt1g3r/CVE-2018-8174_EXP CVE-2018-8174_python
164 2022-11-18T05:44:32Z CVE-2018-3245 https://github.com/pyn3rd/CVE-2018-3245 CVE-2018-3245-PoC
123 2022-11-15T17:39:16Z cve-2018-8453-exp https://github.com/ze0r/cve-2018-8453-exp cve-2018-8453 exp
299 2022-10-29T01:42:31Z struts-pwn_CVE-2018-11776 https://github.com/mazen160/struts-pwn_CVE-2018-11776 An exploit for Apache Struts CVE-2018-11776
145 2022-11-09T18:04:13Z CVE-2018-13382 https://github.com/milo2012/CVE-2018-13382 CVE-2018-13382
167 2022-07-18T08:25:41Z CVE-2018-8174-msf https://github.com/0x09AL/CVE-2018-8174-msf CVE-2018-8174 - VBScript memory corruption exploit.
192 2022-11-09T18:00:18Z CVE-2018-0296 https://github.com/yassineaboukir/CVE-2018-0296 Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
181 2022-07-29T07:41:20Z CVE-2018-15982_EXP https://github.com/Ridter/CVE-2018-15982_EXP exp of CVE-2018-15982
166 2022-11-03T03:22:28Z cve-2018-8120 https://github.com/bigric3/cve-2018-8120
165 2022-12-02T09:30:20Z RTF_11882_0802 https://github.com/Ridter/RTF_11882_0802 PoC for CVE-2018-0802 And CVE-2017-11882
543 2022-12-22T14:03:22Z Drupalgeddon2 https://github.com/dreadlocked/Drupalgeddon2 Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
219 2022-11-09T17:39:20Z poc_CVE-2018-1002105 https://github.com/evict/poc_CVE-2018-1002105 PoC for CVE-2018-1002105.
99 2022-11-30T19:08:04Z CVE-2018-2893 https://github.com/pyn3rd/CVE-2018-2893 CVE-2018-2893-PoC
101 2022-11-15T17:39:50Z CVE-2018-7600 https://github.com/pimps/CVE-2018-7600 Exploit for Drupal 7 <= 7.57 CVE-2018-7600
257 2022-12-22T07:48:43Z credssp https://github.com/preempt/credssp A code demonstrating CVE-2018-0886

2017

star updated_at name url des
696 2022-12-22T18:26:14Z CVE-2017-0199 https://github.com/bhdresh/CVE-2017-0199 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
1561 2022-12-22T18:26:16Z weblogicScanner https://github.com/0xn0ne/weblogicScanner weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
530 2022-12-22T18:26:14Z CVE-2017-11882 https://github.com/Ridter/CVE-2017-11882 CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882
491 2022-11-09T17:58:31Z CVE-2017-11882 https://github.com/embedi/CVE-2017-11882 Proof-of-Concept exploits for CVE-2017-11882
450 2022-12-22T18:26:14Z CVE-2017-0785 https://github.com/ojasookert/CVE-2017-0785 Blueborne CVE-2017-0785 Android information leak vulnerability
719 2022-12-10T13:13:08Z spectre-attack https://github.com/Eugnis/spectre-attack Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)
373 2022-11-15T17:34:59Z CVE-2017-12617 https://github.com/cyberheartmi9/CVE-2017-12617 Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution
319 2022-12-02T09:30:30Z CVE-2017-8759 https://github.com/bhdresh/CVE-2017-8759 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.
328 2022-12-03T04:05:22Z exploit-CVE-2017-7494 https://github.com/opsxcq/exploit-CVE-2017-7494 SambaCry exploit and vulnerable container (CVE-2017-7494)
308 2022-12-02T09:30:27Z CVE-2017-11882 https://github.com/unamer/CVE-2017-11882 CVE-2017-11882 Exploit accepts over 17k bytes long command/code in maximum.
294 2022-12-12T21:21:04Z eternal_scanner https://github.com/peterpt/eternal_scanner An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
183 2022-12-02T09:30:35Z CVE-2017-8570 https://github.com/rxwx/CVE-2017-8570 Proof of Concept exploit for CVE-2017-8570
254 2022-12-04T18:51:49Z CVE-2017-7494 https://github.com/joxeankoret/CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability
257 2022-12-02T09:30:30Z CVE-2017-8759-Exploit-sample https://github.com/Voulnet/CVE-2017-8759-Exploit-sample Running CVE-2017-8759 exploit sample.
169 2022-11-09T17:59:48Z Jira-Scan https://github.com/random-robbie/Jira-Scan CVE-2017-9506 - SSRF
175 2022-10-25T05:07:41Z CVE-2017-8759 https://github.com/vysecurity/CVE-2017-8759 CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
245 2022-07-15T07:06:09Z struts-pwn_CVE-2017-9805 https://github.com/mazen160/struts-pwn_CVE-2017-9805 An exploit for Apache Struts CVE-2017-9805
42 2022-06-27T02:45:39Z CVE-2017-11882 https://github.com/starnightcyber/CVE-2017-11882 CVE-2017-11882 exploitation
83 2022-12-02T09:30:28Z CVE-2017-8759 https://github.com/Lz1y/CVE-2017-8759 CVE-2017-8759
181 2022-12-10T00:23:49Z cve-2017-7494 https://github.com/betab0t/cve-2017-7494 Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)
165 2022-12-02T09:30:20Z RTF_11882_0802 https://github.com/Ridter/RTF_11882_0802 PoC for CVE-2018-0802 And CVE-2017-11882
127 2022-07-06T08:12:29Z cve-2017-7269 https://github.com/zcgonvh/cve-2017-7269 fixed msf module for cve-2017-7269
169 2022-12-06T07:45:50Z jboss-_CVE-2017-12149 https://github.com/yunxu1/jboss-_CVE-2017-12149 CVE-2017-12149 jboss反序列化 可回显
58 2022-12-18T11:31:00Z iis6-exploit-2017-CVE-2017-7269 https://github.com/g0rx/iis6-exploit-2017-CVE-2017-7269 iis6 exploit 2017 CVE-2017-7269
412 2022-11-26T14:55:48Z struts-pwn https://github.com/mazen160/struts-pwn An exploit for Apache Struts CVE-2017-5638
98 2022-11-17T14:25:55Z CVE-2017-11882-metasploit https://github.com/0x09AL/CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.
139 2022-11-08T08:13:42Z CVE-2017-10271 https://github.com/c0mmand3rOpSec/CVE-2017-10271 WebLogic Exploit
56 2022-06-12T07:10:35Z Exploit-Development https://github.com/wetw0rk/Exploit-Development CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002
266 2022-12-02T09:30:11Z CVE-2018-0802 https://github.com/rxwx/CVE-2018-0802 PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)
49 2022-11-06T13:48:59Z CVE-2017-1000353 https://github.com/vulhub/CVE-2017-1000353 jenkins CVE-2017-1000353 POC

2016

star updated_at name url des
913 2022-12-15T06:40:37Z CVE-2016-5195 https://github.com/timwr/CVE-2016-5195 CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android
692 2022-12-21T05:31:56Z dirtycow https://github.com/firefart/dirtycow Dirty Cow exploit - CVE-2016-5195
1561 2022-12-22T18:26:16Z weblogicScanner https://github.com/0xn0ne/weblogicScanner weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
385 2022-12-10T15:59:16Z exploit-CVE-2016-10033 https://github.com/opsxcq/exploit-CVE-2016-10033 PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container
329 2022-08-18T09:58:12Z CVE-2016-0051 https://github.com/koczkatamas/CVE-2016-0051 EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)
485 2022-11-19T12:22:00Z PoCs https://github.com/ImageTragick/PoCs Proof of Concepts for CVE-2016–3714
270 2022-12-12T18:02:42Z CVE-2016-5195 https://github.com/gbonacini/CVE-2016-5195 A CVE-2016-5195 exploit example.
428 2022-12-08T06:48:36Z dirtycow-vdso https://github.com/scumjr/dirtycow-vdso PoC for Dirty COW (CVE-2016-5195)
153 2022-11-09T17:55:27Z CVE-2016-6366 https://github.com/RiskSense-Ops/CVE-2016-6366 Public repository for improvements to the EXTRABACON exploit
181 2022-10-11T23:32:52Z CVE-2016-2107 https://github.com/FiloSottile/CVE-2016-2107 Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)
111 2022-06-14T15:30:41Z cve-2016-0189 https://github.com/theori-io/cve-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)
84 2022-11-09T17:56:32Z CVE-2016-7255 https://github.com/FSecureLABS/CVE-2016-7255 An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
324 2022-12-06T18:45:31Z ExtractKeyMaster https://github.com/laginimaineb/ExtractKeyMaster Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
139 2022-07-15T03:04:41Z chakra-2016-11 https://github.com/theori-io/chakra-2016-11 Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)
67 2022-07-20T18:41:07Z CVE-2016-3714 https://github.com/Hood3dRob1n/CVE-2016-3714 ImaegMagick Code Execution (CVE-2016-3714)
82 2022-07-04T23:28:02Z CVE-2016-0801 https://github.com/abdsec/CVE-2016-0801
155 2022-10-25T20:39:51Z BadKernel https://github.com/secmob/BadKernel Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016
50 2022-11-26T00:46:31Z cve-2016-1764 https://github.com/moloch--/cve-2016-1764 Extraction of iMessage Data via XSS
94 2022-09-19T09:19:56Z PegasusX https://github.com/jndok/PegasusX OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656
95 2022-12-20T02:47:37Z jscpwn https://github.com/saelo/jscpwn PoC exploit for CVE-2016-4622
56 2022-06-12T07:10:35Z Exploit-Development https://github.com/wetw0rk/Exploit-Development CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002
53 2022-11-23T12:19:24Z exploit-CVE-2016-6515 https://github.com/opsxcq/exploit-CVE-2016-6515 OpenSSH remote DOS exploit and vulnerable container
47 2022-06-20T08:11:35Z cve-2016-0040 https://github.com/Rootkitsmm-zz/cve-2016-0040 Exploiting CVE-2016-0040 uninitialized pointer
49 2021-08-24T04:46:02Z CVE-2016-3308 https://github.com/55-AA/CVE-2016-3308 Use CVE-2016-3308 corrupt win32k desktop heap
52 2022-12-07T05:23:25Z cve-2016-2431 https://github.com/laginimaineb/cve-2016-2431 Qualcomm TrustZone kernel privilege escalation
51 2022-12-16T16:50:36Z CVE-2016-3309_Reloaded https://github.com/siberas/CVE-2016-3309_Reloaded Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques
50 2022-06-25T01:31:15Z jenkins-cve-2016-0792 https://github.com/jpiechowka/jenkins-cve-2016-0792 Exploit for Jenkins serialization vulnerability - CVE-2016-0792
82 2021-12-29T03:39:19Z mach_race https://github.com/gdbinit/mach_race Exploit code for CVE-2016-1757
50 2022-06-20T13:06:25Z CVE-2016-2434 https://github.com/jianqiangzhao/CVE-2016-2434
38 2021-08-07T17:11:54Z CVE-2016-0846 https://github.com/secmob/CVE-2016-0846 arbitrary memory read/write by IMemroy OOB

2015

star updated_at name url des
548 2022-09-25T15:47:17Z CVE-2015-7547 https://github.com/fjserna/CVE-2015-7547 Proof of concept for CVE-2015-7547
284 2022-11-12T18:38:46Z CVE-2015-1701 https://github.com/hfiref0x/CVE-2015-1701 Win32k LPE vulnerability used in APT attack
265 2022-11-18T11:21:23Z iovyroot https://github.com/dosomder/iovyroot CVE-2015-1805 root tool
197 2022-11-09T20:34:47Z cve-2015-1538-1 https://github.com/jduck/cve-2015-1538-1 An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
130 2022-11-18T12:24:17Z CVE-2015-3636 https://github.com/fi01/CVE-2015-3636 PoC code for 32 bit Android OS
396 2022-11-25T21:01:01Z tpwn https://github.com/kpwn/tpwn xnu local privilege escalation via cve-2015-???? & cve-2015-???? for 10.10.5, 0day at the time
118 2022-10-14T04:09:58Z PoCForCVE-2015-1528 https://github.com/secmob/PoCForCVE-2015-1528 I'll submit the poc after blackhat
110 2022-11-17T11:24:01Z cve-2015-6639 https://github.com/laginimaineb/cve-2015-6639 QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)
100 2022-12-22T20:07:23Z exploit-CVE-2015-3306 https://github.com/t0kx/exploit-CVE-2015-3306 ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
324 2022-12-06T18:45:31Z ExtractKeyMaster https://github.com/laginimaineb/ExtractKeyMaster Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431
65 2022-11-06T15:48:55Z cve-2015-5477 https://github.com/robertdavidgraham/cve-2015-5477 PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure
103 2022-11-14T12:41:44Z juniper-cve-2015-7755 https://github.com/hdm/juniper-cve-2015-7755 Notes, binaries, and related information from analysis of the CVE-2015-7755 & CVE-2015-7756 issues within Juniper ScreenOS
66 2020-09-21T23:27:26Z CVE-2015-6086 https://github.com/payatu/CVE-2015-6086 PoC for CVE-2015-6086
42 2022-04-16T17:50:28Z libpingpong_exploit https://github.com/android-rooting-tools/libpingpong_exploit CVE-2015-3636 exploit
32 2022-06-20T17:15:51Z CVE-2015-1805 https://github.com/panyu6325/CVE-2015-1805
43 2022-06-23T11:57:31Z mysslstrip https://github.com/duo-labs/mysslstrip CVE-2015-3152 PoC
24 2022-07-23T07:42:34Z CVE-2015-6612 https://github.com/secmob/CVE-2015-6612
22 2020-12-24T15:36:05Z CVE-2015-2546-Exploit https://github.com/k0keoyo/CVE-2015-2546-Exploit
40 2021-11-16T11:51:19Z CVE-2015-6620-POC https://github.com/flankerhqd/CVE-2015-6620-POC POC for CVE-2015-6620, AMessage unmarshal arbitrary write
11 2022-10-04T08:16:39Z privesc-CVE-2015-5602 https://github.com/t0kx/privesc-CVE-2015-5602 Sudo <= 1.8.14 Local Privilege Escalation and vulnerable container
29 2022-11-09T17:56:08Z exploit-CVE-2015-1427 https://github.com/t0kx/exploit-CVE-2015-1427 Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container
29 2021-04-03T19:07:13Z serialator https://github.com/roo7break/serialator Python script to exploit CVE-2015-4852.
50 2022-07-04T16:25:48Z bluebox https://github.com/JackOfMostTrades/bluebox Automated Exploit Toolkit for CVE-2015-6095 and CVE-2016-0049
21 2019-12-08T12:35:07Z cve-2015-0313 https://github.com/SecurityObscurity/cve-2015-0313
25 2022-04-19T11:39:57Z CVE-2015-0057 https://github.com/55-AA/CVE-2015-0057 翻译文章,CVE-2015-0057漏洞在32位和64位系统上的利用。Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE 2015-0057) bug on both 32-bit and 64-bit(Aaron Adams of NCC )
15 2021-12-20T20:47:43Z CVE-2015-6132 https://github.com/hexx0r/CVE-2015-6132 Microsoft Office / COM Object DLL Planting
13 2022-06-14T13:05:48Z CVE-2015-5119_walkthrough https://github.com/CiscoCXSecurity/CVE-2015-5119_walkthrough Archive from the article CVE-2015-5119 Flash ByteArray UaF: A beginner's walkthrough
17 2021-11-01T07:20:24Z CVE-2015-3636 https://github.com/a7vinx/CVE-2015-3636 Expolit for android (goldfish kernel v3.10.0+) on arm64 with PXN&SELinux Bypassed. Based on fi01's code.
24 2022-11-24T11:06:13Z JoomlaMassExploiter https://github.com/paralelo14/JoomlaMassExploiter [discontinued] Mass exploiter of CVE 2015-8562 for Joomla! CMS
16 2018-07-11T03:41:11Z cve-2015-6612poc-forM https://github.com/flankerhqd/cve-2015-6612poc-forM

2014

star updated_at name url des
2282 2022-12-23T03:11:18Z Heartbleed https://github.com/FiloSottile/Heartbleed A checker (site and tool) for CVE-2014-0160
145 2022-12-08T19:06:09Z CVE-2014-7911_poc https://github.com/retme7/CVE-2014-7911_poc Local root exploit for Nexus5 Android 4.4.4(KTU84P)
448 2022-11-14T16:59:29Z heartbleeder https://github.com/titanous/heartbleeder OpenSSL CVE-2014-0160 Heartbleed vulnerability test
120 2022-11-10T10:10:14Z CVE-2014-3153 https://github.com/timwr/CVE-2014-3153 CVE-2014-3153 aka towelroot
1561 2022-12-22T18:26:16Z weblogicScanner https://github.com/0xn0ne/weblogicScanner weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
319 2022-11-01T18:40:40Z pacemaker https://github.com/Lekensteyn/pacemaker Heartbleed (CVE-2014-0160) client exploit
148 2022-12-15T00:43:17Z exploit-CVE-2014-6271 https://github.com/opsxcq/exploit-CVE-2014-6271 Shellshock exploit + vulnerable environment
193 2022-10-28T15:03:55Z cve-2014-0038 https://github.com/saelo/cve-2014-0038 Linux local root exploit for CVE-2014-0038
89 2022-06-23T11:57:10Z CVE-2014-4322_poc https://github.com/retme7/CVE-2014-4322_poc Gain privileges:system -> root,as a part of https://github.com/retme7/CVE-2014-7911_poc
75 2022-11-18T12:24:19Z cve-2014-7920-7921 https://github.com/laginimaineb/cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1
70 2020-09-11T14:51:09Z CVE-2014-4377 https://github.com/feliam/CVE-2014-4377
151 2022-12-22T17:09:10Z heartbleed-poc https://github.com/sensepost/heartbleed-poc Test for SSL heartbeat vulnerability (CVE-2014-0160)
44 2022-08-01T22:05:04Z shellshock_scanner https://github.com/scottjpack/shellshock_scanner Python Scanner for "ShellShock" (CVE-2014-6271)
573 2022-12-18T14:36:04Z heartbleed-masstest https://github.com/musalbas/heartbleed-masstest Multi-threaded tool for scanning many hosts for CVE-2014-0160.
43 2022-07-21T08:50:27Z CVE-2014-4113 https://github.com/sam-b/CVE-2014-4113 Trigger and exploit code for CVE-2014-4113
17 2019-03-17T17:41:06Z libfutex_exploit https://github.com/android-rooting-tools/libfutex_exploit CVE-2014-3153 exploit
20 2022-10-15T14:05:43Z cve-2014-4322 https://github.com/laginimaineb/cve-2014-4322 CVE-2014-4322 Exploit
77 2022-03-03T03:22:33Z CVE-2014-1266-poc https://github.com/gabrielg/CVE-2014-1266-poc Apple OS X/iOS SSL flaw demonstration
96 2022-08-06T13:15:59Z SSRFX https://github.com/NoneNotNull/SSRFX CVE-2014-4210+Redis未授权访问
32 2022-06-13T06:40:39Z springcss-cve-2014-3625 https://github.com/ilmila/springcss-cve-2014-3625 spring mvc cve-2014-3625
19 2020-08-27T17:35:49Z libmsm_vfe_read_exploit https://github.com/android-rooting-tools/libmsm_vfe_read_exploit CVE-2014-4321 exploit
23 2020-08-12T12:46:41Z CVE-2014-0816 https://github.com/tandasat/CVE-2014-0816 CVE-2014-0816
214 2022-12-16T10:57:05Z poodle-PoC https://github.com/mpgn/poodle-PoC 🐩 Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 🐩
16 2022-03-15T23:20:04Z CVE-2014-4378 https://github.com/feliam/CVE-2014-4378
12 2021-02-15T11:51:51Z cve-2014-0521 https://github.com/molnarg/cve-2014-0521
73 2022-12-17T04:57:38Z heartbleed-PoC https://github.com/mpgn/heartbleed-PoC 💔 Hearbleed exploit to retrieve sensitive information CVE-2014-0160 💔
23 2022-04-14T09:37:37Z cve-2014-4323 https://github.com/marcograss/cve-2014-4323 cve-2014-4323 poc
13 2022-03-24T18:14:32Z vaas-cve-2014-0160 https://github.com/hmlio/vaas-cve-2014-0160 Vulnerability as a service: showcasing CVS-2014-0160, a.k.a. Heartbleed
6 2019-05-15T09:18:49Z CVE-2014-0160 https://github.com/0x90/CVE-2014-0160 Heartbleed variants
20 2021-03-14T13:05:11Z vaas-cve-2014-6271 https://github.com/hmlio/vaas-cve-2014-6271 Vulnerability as a service: showcasing CVS-2014-6271, a.k.a. Shellshock

2013

star updated_at name url des
89 2022-11-29T14:31:49Z cve-2013-2094 https://github.com/realtalk/cve-2013-2094 original cve-2013-2094 exploit and a rewritten version for educational purposes
23 2020-04-14T15:23:21Z CVE-2013-2729 https://github.com/feliam/CVE-2013-2729
15 2021-08-04T05:49:22Z libperf_event_exploit https://github.com/hiikezoe/libperf_event_exploit CVE-2013-2094 exploit for android
26 2022-10-26T16:19:59Z libput_user_exploit https://github.com/fi01/libput_user_exploit CVE-2013-6282 exploit
15 2022-11-10T10:07:36Z CVE-2013-6282 https://github.com/timwr/CVE-2013-6282 CVE-2013-6282 proof of concept for Android
9 2019-05-09T06:37:37Z CVE20131491-JIT https://github.com/guhe120/CVE20131491-JIT JIT spray version of cve-2013-1491
51 2022-10-17T13:07:21Z nginxpwn https://github.com/kitctf/nginxpwn Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow
11 2018-12-20T17:02:39Z libmsm_acdb_exploit https://github.com/fi01/libmsm_acdb_exploit CVE-2013-2597 exploit
30 2022-04-01T01:43:20Z nginx-1.4.0 https://github.com/danghvu/nginx-1.4.0 For the analysis of CVE-2013-2028
5 2021-08-04T05:58:22Z libfb_mem_exploit https://github.com/hiikezoe/libfb_mem_exploit CVE-2013-2596 exploit for android
8 2019-01-04T20:51:23Z cve-2013-1300 https://github.com/Meatballs1/cve-2013-1300
10 2020-04-23T18:50:20Z CVE-2013-2730 https://github.com/feliam/CVE-2013-2730
5 2022-07-18T20:20:55Z CVE-2013-6117 https://github.com/milo2012/CVE-2013-6117 CVE-2013-6117
10 2022-11-09T18:04:42Z ntpdos https://github.com/sepehrdaddev/ntpdos PoC for distributed NTP reflection DoS (CVE-2013-5211)
39 2022-09-06T21:45:52Z ACEDcup https://github.com/GrrrDog/ACEDcup Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)
7 2018-12-20T17:02:44Z libmsm_cameraconfig_exploit https://github.com/fi01/libmsm_cameraconfig_exploit CVE-2013-2595 exploit
14 2022-12-09T12:39:04Z annotated-fbi-tbb-exploit https://github.com/vlad902/annotated-fbi-tbb-exploit Annotated FBI exploit for the Tor Browser Bundle from mid-2013 (CVE-2013-1690)
14 2022-10-26T16:25:08Z bypasslkm https://github.com/jeboo/bypasslkm Using CVE-2013-6282 to bypass Samsung kernel module authentication
5 2019-03-16T21:48:29Z rails-exploit-cve-2013-0156 https://github.com/bsodmike/rails-exploit-cve-2013-0156 Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156
13 2022-05-14T23:20:47Z ShellEvil https://github.com/ninj4c0d3r/ShellEvil Struts 2 DefaultActionMapper Interactive Shell Exploit for CVE-2013-225 [S2-016]
14 2022-10-02T00:26:54Z ntpscanner https://github.com/dani87/ntpscanner Scans NTP servers for CVE-2013-5211 NTP DDOS amplification vulnerability.
4 2020-04-07T07:55:01Z cve-2013-2094 https://github.com/timhsutw/cve-2013-2094 CVE-2013-2094 kernel exploit for i386
7 2022-05-21T04:49:37Z libget_user_exploit https://github.com/fi01/libget_user_exploit CVE-2013-6282 exploit
2 2019-04-03T02:31:09Z CVE-2013-5842 https://github.com/guhe120/CVE-2013-5842
5 2021-09-07T05:42:41Z buherablog-cve-2013-1488 https://github.com/v-p-b/buherablog-cve-2013-1488 PoC Java exploit based on http://www.contextis.com/research/blog/java-pwn2own/
3 2022-10-02T00:27:05Z ntpscanner https://github.com/suedadam/ntpscanner NTP monlist scanner CVE-2013-5211
4 2016-09-04T16:48:08Z CVE-2013-2094 https://github.com/Pashkela/CVE-2013-2094 CVE-2013-2094 Linux 2.6.32/2.6.37 - 3.8.10 PERF_EVENTS local root x86/x86_64
11 2022-10-19T02:46:06Z CVE-2013-2028-Exploit https://github.com/m4drat/CVE-2013-2028-Exploit CVE-2013-2028 python exploit
2 2016-09-04T16:47:56Z heroku-CVE-2013-0269 https://github.com/heroku/heroku-CVE-2013-0269 Inspect all of your Heroku apps for vulnerable versions of the JSON gem
0 2017-02-01T03:20:45Z fix-cve-2013-2094 https://github.com/tarunyadav/fix-cve-2013-2094

Donation

Wechat Pay AliPay Paypal BTC Pay BCH Pay
paypal miracletalent@gmail.com

About

TOP All bugbounty pentesting CVE-2022- POC Exp RCE example payload Things

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Shell 100.0%