Exploits

This project contains a Python script that exploits **CVE-2023-38831**, a vulnerability in **WinRAR** versions prior to 6.23. The exploit generates a **malicious RAR archive** that triggers the execution of arbitrary code when the victim opens a benign-looking file within the archive (such as a PDF).

d

CVE-2019-15107 webmin 취약점에 대해서 직접 서버를 구축하고 공격 결과를 남긴 정보입니다.

Client Implementation for the WatchGuard SSO Agent Protocol used for Security Research (CVE-2024-6592, CVE-2024-6593, CVE-2024-6594)

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692

🔍 Just wrapped up an incident report on a Phishing Alert (Event ID 257, SOC282). Enhancing my expertise in email threat detection and response! 🚨 #Cybersecurity #SOCAnalyst #LetsDefend

A POC demo on CVE-2023-38831

CVE-2019-15107 Webmin unauthenticated RCE

最新tomcat漏洞扫描工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615文件上传

Kernel exploit for Xbox SystemOS using CVE-2024-30088

PoC

This repository contains detailed documentation and code related to the exploitation, detection, and mitigation of two significant vulnerabilities: CVE-2020-0796 (SMBGhost) and Print Spooler.

This Python application scans for the CVE-2023-38831 vulnerability in WinRAR.

Windows AppLocker Driver (appid.sys) LPE

This repository contains scripts and resources for exploiting the Follina CVE and CVE-2021-40444 vulnerabilities in Microsoft Office. The scripts generate malicious document files that can execute arbitrary code on the target system.

Questa repository contiene una replica (tentativo di replica) scritto in Python per CVE-2024-30088.

Remote Access Trojan (RAT) for Windows x64 using a combination of vulnerability CVE-2023-38831 (WinRAR < 6.23 vulnerability) and Shellcode exploitation technique.

Hello everyone, I am sharing a modified script from CVE-2024-24919 which can extract paths categorized as critical.