pocexploitGHSA-652q-gvq3-74qv
Reproduction of cve-2024-3400-panos_rce_reproduction
Reproduction of cve-2024-23897-jenkins_lfi_reproduction
Reproduction of cve-2024-1708-connectwise_rce_reproduction
cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security
Proof-of-concept and technical write-up for CVE-2026-65971 — SQL injection via the sortDirection Livewire property in power-components/livewire-powergrid (< 6.10.4)
Proof-of-concept and offensive security research analyzing CVE-2026-23744 (MCPJam Inspector Unauthenticated RCE, Patched in v1.4.3+).
Security analysis and report of CVE-2024-6387 OpenSSH vulnerability, including vulnerability details, CVSS evaluation, and mitigation recommendations.
Detection-only asynchronous IPv4 scanner for identifying WatchGuard Fireware version/build profiles associated with CVE-2025-9242 via IKEv2.
YellowKey free tool for the CVE-2026-45585 BitLocker bypass vulnerability on Windows 10/11. Covered on Tom's Hardware: extract recovery keys, apply remediation, test bypass mitigation and manage BitLocker encryption state. Download YellowKey
Legacy HPE iMC vuln
Tproot es una máquina de nivel Muy Fácil de DockerLabs centrada en la explotación manual del servicio vsftpd 2.3.4 (CVE-2011-2523).
CVE-2026-66374: Knot Resolver 6.3.0 DNS-over-QUIC heap overflow (RCE)
GitHub Actions workflow sandbox for CVE-2026-45132 reproduction
Flowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject arbitrary code through MCP stdio. Supports reverse shell, persistence, file upload, credential dumping. For authorized security testing only.
GitHub Actions workflow sandbox (CVE-2026-48546 reproduction)
Initialized & connected PostgreSQL to Metasploit. Reconnoitered 10.1.16.0/24 with Nmap and imported results. Enumerated hosts/services using SYN, SMB & LDAP scanners. Exploited DC10 via ZeroLogon (CVE-2020-1472), dumped AD NTLM hashes with Impacket, performed Pass-the-Hash, then gained a Meterpreter reverse shell.
CVE-2026-41940 & CVE-2026-41948 — cPanel & WHM Auth Bypass