Exploits

This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.

This contains single-file exploit for cve-2021-4034 which is a Polkit Local Privilege Escalation. Use it wisely!

CVE-2025-3248: A critical flaw has been discovered in Langflow that allows malicious actors to execute arbitrary Python code on the target system. This can lead to full remote code execution without authentication, potentially giving attackers control over the server.

automated SQL injection for QCubed profile.php file

SAP NetWeaver Visual Composer Metadata Uploader 7.50 CVE-2025-31324 PoC

sap-netweaver-cve-2025-31324-check

Research Purposes only

Scanner and exploit for CVE-2025-3248

CVE-2025-31324 vulnerability and compromise assessment tool

A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise (IOCs) such as malicious .jsp.

🔍 A simple Bash script to detect malicious JSP webshells, including those used in exploits of SAP NetWeaver CVE-2025-31324.

A totally unauthenticated file-upload endpoint in Visual Composer lets anyone drop arbitrary files (e.g., a JSP web-shell) onto the server.

Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324

CVE-2021-42287/CVE-2021-42278/OTHER Scanner & Exploiter.

Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader

Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader

Proof-of-Concept for CVE-2025-31324: Unauthenticated upload in SAP NetWeaver Visual Composer Metadata Uploader

SAP NetWeaver Unauthenticated Remote Code Execution