Archived
THM-Steel_Mountain-CVE-2014-6287
wizardy0ga/thm-steel_mountain-cve-2014-6287A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287
privilege-escalationpayload-generationvulnerability-analysis+7
Tools for testing, exploiting, and securing web applications and APIs.
wizardy0ga/thm-steel_mountain-cve-2014-6287A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287
wizardy0ga/thm-source-cve-2019-15231A write up on the TryHackMe room Source & a python script to exploit the vulnerability
timothyjxhn/deliberatelyvulnerablewebappA Deliberately Vulnerable Web Application built on Struts 2 (CVE-2017-5638) and Log4J (CVE-2021-44228) for testing and demonstration of OWASP Top 10…
takeshixx/ssl-heartbleed.nseNmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160
suniastar/scan-log4shellA scanning suite to find servers affected by the log4shell flaw (CVE-2021-44228) with example to test it
shiomiyan/cve-2021-41773
serhalp/test-cve-2025-29927Verify Next.js CVE-2025-29927 on Netlify not vulnerable
rastating/modsecurity-cve-2018-6389A ModSecurity ruleset for detecting potential attacks using CVE-2018-6389
progfay/cve-2020-8165PoC for CVE-2020-8165
omar2535/cve-2022-39275CVE-2022-39275 Setup and POC
lpuv/cve-2012-2982Webmin 1.580 /file/show.cgi Remote Code Execution
ipuig/cve-2023-50564CVE-2023-50564 PoC
insomnisec/detections-cve-2026-23918Detection rules for CVE-2026-23918 Apache http2 RCE - Credit: stringa.ai, isec.pl
giz-berlin/quasar-app-webpack-json5-vulnerabilityReproduction for CVE-2022-46175
ethicalblue/follina-cve-2022-30190-sampleEducational exploit for CVE-2022-30190
damariion/cve-2017-14980.rceBuffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login
daedalus/cve-2021-30461CVE-2021-30461