
AutoPwn-Titanic.htb
This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and…

Proof of concept / CTF script for exploiting CVE-2022-46169 in Cacti, versions >=1.2.22

Python exploit script for CVE-2023-33733 targeting web applications. Automates authentication, session extraction, and reverse shell delivery for…

Challenge based on CVE-2021-22204 where users send a malicious file to a web application to gain RCE

This is a exploit for the known Remote Code Execution (RCE) vulnerability in the `pymatgen` (CVE-2024-23346) Python library by uploading a malicious…

PoC to CVE-2023-30547 (Library vm2)

Exploit scripts for CVE-2015-1397 in Magento CMS, including a pre-auth exploit to gain admin credentials and a post-auth RCE module for reverse shell…

CVE-2025-4138 - Python Arbitrary file write outside extraction directory

JWT Key Confusion PoC (CVE-2015-9235) Written for the Hack the Box challenge - Under Construction

CVE-2025-24893 – XWiki SSTI unauthenticated RCE exploit (HackTheBox CTF)

Proof-of-concept exploit for CVE-2023-24249, an arbitrary file upload vulnerability in laravel-admin, enabling web shell deployment for penetration…

Exploit for the PHP 8.1.0-dev backdoor vulnerability (CVE-2021-21707)

Created this exploit for the Hack The Box machine, Blurry.

Chamilo LMS Unauthenticated Big Upload File that allows remote code execution

Re-play Security Events

WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…

A malicious LDAP server for JNDI injection attacks