Exploits

Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。)

This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses.

Cisco ASA CVE-2018-0101 PoC script.

Windows Kernel Elevation of Privilege (PoC)

The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.

Handlebars CVE-2021-23369 Vulnerability

Vulnerability Overview CVE-2023-38408 affects OpenSSH versions < 9.3p2 and stems from improper validation of data when SSH agent forwarding is enabled. When users connect to a remote server with ssh -A, they allow the agent on their local machine to be used for authentication to further systems

CVE-2024-30090 - LPE PoC

Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。)

PoC for the Untrusted Pointer Dereference in the ks.sys driver

PoC for the Untrusted Pointer Dereference in the ks.sys driver

Keycloak admin API allows low privilege users to use administrative functions

i'm noob with saml and keycloak . J4f

PoC exploit for CVE-2020-9484, and a vulnerable web application for its demonstration

Materials for CVE-2024-30052.

PoC of the CVE-2023-3390

PoC script for CVE-2024-24919 vulnerability. It scans a list of target URLs to identify security issues by sending HTTP POST requests and analyzing server responses

This project contains a Python script that exploits **CVE-2023-38831**, a vulnerability in **WinRAR** versions prior to 6.23. The exploit generates a **malicious RAR archive** that triggers the execution of arbitrary code when the victim opens a benign-looking file within the archive (such as a PDF).