Penetration_Testing_POC

Penetration_Testing_POC

A collection of POCs, scripts, tools, articles, and other tips and techniques used in penetration testing, shared as notes. Contributions are welcome.

Please be aware that all tools may contain backdoors or other abnormal behavior; it is recommended to operate in a virtual environment.

• Penetration_Testing_POC
• Please make good use of search [Ctrl+F] to find
• IOT Device&Mobile Phone
• Web APP
• Privilege Escalation Assistance Related
• PC
• tools - Small Tool Collection
• Articles/Books/Tutorials Related
• Notes

Please make good use of search [Ctrl+F] to find

IOT Device&Mobile Phone

• Tianyi Skyworth awifi router has multiple unauthorized access vulnerabilities
• Huawei WS331a product management page has a CSRF vulnerability
• CVE-2019-16313 Fengwang Hulian enterprise router v4.31 password disclosure vulnerability
• D-Link router RCE vulnerability
• CVE-2019-13051-Pi-Hole router-side ad-blocking software command injection & privilege escalation
• D-Link DIR-859 - RCE UnAutenticated (CVE-2019–17621)
• Huawei HG255 Directory Traversal [directory traversal]|local backup file
• D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit) CVE-2019-20215 (Metasploit)%20CVE-2019-20215.rb)
• From Interfaces.d to RCE: Vulnerability research on the Mozilla WebThings IoT gateway
• Xiaomi series router remote command execution vulnerabilities (CVE-2019-18370, CVE-2019-18371)
• Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload - firmware can be replaced without authentication)
• cve-2020-8634&cve-2020-8635|Wing FTP Server 6.2.3 privilege escalation vulnerability discovery, analysis and reproduction process|Wing FTP Server 6.2.5 privilege escalation
• CVE-2020-9374-TP LINK TL-WR849N - RCE
• CVE-2020-12753-LG smartphone arbitrary code execution vulnerability
• CVE-2020-12695-UPnP security vulnerability
• 79 Netgear routers remotely taken over by 0day
• dlink-dir610-exploits-Exploits for CVE-2020-9376 and CVE-2020-9377
• wacker: a set of scripts that assist in performing online dictionary attacks against WPA3 access points
• CVE-2020-24581 D-Link DSL-2888A remote command execution vulnerability analysis-original address
• CNVD-2021-14536_Ruijie RG-UAC Unified Internet Behavior Management Audit System account password information disclosure vulnerability
• CNVD-2021-14544:Hikvision streaming media management server arbitrary file read
• CNVD-2020-25078:D-link sensitive information disclosure, account passwords can be obtained directly to view surveillance
• ios-gamed-0day
• ios-nehelper-wifi-info-0day
• ios-nehelper-enum-apps-0day
• iOS 15.0.1 RCE PoC
• DarkSword-RCE: Apple iOS remote code execution vulnerability exploit|darksword-kexploit: Apple iOS kernel exploit|DarkSword: Apple iOS exploit
• CVE-2021-36260: Hikvision product command injection vulnerability
• CVE-2021-33044, CVE-2021-33045 Dahua camera POC|Related analysis|Login bypass Chrome extension
• CVE-2021-36260: Hikvision command injection vulnerability|Another CVE-2021-36260 exploit script
• CVE-2021-41653: TP-Link TL-WR840N V5(EU) - RCE%20-%20RCE%20-%20CVE-2021-41653.pdf)
• DirtyPipe-Android: Dirty Pipe root exploit for Android
• CVE-2022-30075: Tp-Link Archer AX50 Authenticated RCE
• NotQuite0day: D-Link 1960 related vulnerabilities
• HuaYuReportRCE: HuaYu Digital Report component GetShell
• IOT_Vul: Collection of IoT-related vulnerabilities
• CameraHack: Batch scanning and exploitation of common vulnerabilities in Hikvision, Dahua and other cameras
• CVE-2022-32832: Apple macOS APFS kernel arbitrary code execution vulnerability
• HookWechatRecall: WeChat message recall interception demo using frida
• IOT_vuln: IoT-related vulnerability repository
• hikvision_CVE-2017-7921_auth_bypass_config_decryptor: Decrypt Hikvision configuration files affected by CVE-2017-7921