CVE-2022-30780 - lighttpd remote denial of service

Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell.

A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file.

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks

A script to enumerate valid usernames based on the requests response times.

MailMasta wordpress plugin Local File Inclusion vulnerability (CVE-2016-10956)

Pwndoc local file inclusion to remote code execution of Node.js code on the server

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy

This repository presents a proof-of-concept of CVE-2023-7028

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)