Exploits

Research repository tracking affected IPs from the Fortigate CVE-2022-40684 configuration leak by Belsen Group

Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)

Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

CVE-2024-35250 PoC - Optimized & Condensed Form of Varwara's PoC

# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]

kcfg bypass example - CVE-2024-21338

A Python script to detect CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server, enabling unauthorized access to restricted resources. This tool is for educational purposes and authorized testing only. Unauthorized usage is unethical and illegal.

CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overflow exploit.

Safely detect if an Ivanti server is vulnerable to CVE-2025-0282

This repository contains a Proof of Concept (PoC) for CVE-2015-9251, a vulnerability in jQuery versions prior to 3.0.0 that allows attackers to perform Cross-Site Scripting (XSS) attacks under certain conditions.

A Python-based tool to check for vulnerabilities in OpenSSH installations on local or remote systems by scanning specific IPs. It checks if the OpenSSH version is affected by CVE-2023-48795

CVE-2023-6931 kernel panic PoC

A Python script to scan websites for the CVE-2024-51378 vulnerability.

A vulnerability scanner for Firefox and Thunderbird that checks if your versions are out of date and susceptible to CVE-2024-9680.

Cleo 远程代码执行漏洞批量检测脚本（CVE-2024-50623）

CVE-2023-38831WinRAR代码执行漏洞复现资源文件

AutoBlue - Automated EternalBlue (CVE-2017-0144 / MS17-010) exploitation tool leveraging Nmap and Metasploit for ethical hacking, penetration testing, and CTF challenges. Strictly for authorized and educational use only!

POC Exploit Script in Python