HackTheBox-Facts
suriyaboon/hackthebox-factsHTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…
cloud-securityctfeducation+7
suriyaboon/hackthebox-factsHTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then…
anonymous121029034720384234234/py-network-scannerAdvanced network penetration testing toolkit with SSH vulnerability assessment, CVE-2018-15473 exploitation, stealth brute force capabilities, and…
cesarbtakeda/windows-explorer-cve-2025-24071PoC exploit for CVE-2025-24071, a Windows File Explorer spoofing vulnerability that leaks NTLM hashes via malicious .library-ms files in RAR/ZIP…
fernandobortotti/cve-2024-24919Automated exploit for CVE-2024-24919 with API-based vulnerable IP discovery and LFI brute-force using custom wordlists. Designed for educational…
azurejoga/cve-2025-26326Critical security vulnerability in NVDA remote connection add-ons.
artemcyberlab/project-project-chimera-exploiting-a-modern-wordpress-xxe-to-pillage-secrets-The objective is to conduct a full-scale security assessment of a WordPress-based web application, culminating in a complete server compromise. The…
tr33-he11/winboxpocProof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)
xernary/cve-2025-63820Proof-of-concept of vulnerability found in Totolink A720R router
enzocipher/cve-2023-5359CVE-2023-5359 scanner for W3 Total Cache cleartext storage vulnerability. Detects exposed credentials (API keys, OAuth tokens) in publicly accessible…
mdriaz009/cve-2025-21574-exploitBlack-box exploit for CVE-2025-21574 targeting MySQL servers. Automates credential brute-forcing, anonymous access attempts, and triggers server…
inflixim4be/cve-2020-15392Proof-of-concept exploit for user enumeration vulnerability in Supravizio BPM 10.1.2 via password recovery response differences, enabling brute force…
carlos55ml/zerologonScripts to test and exploit the Zerologon vulnerability (CVE-2020-1472) in Active Directory, enabling password reset and hash dumping of domain…
tuancui22/zerologonwithimpacket-cve2020-1472A practical proof-of-concept for CVE-2020-1472 (Zerologon) using the Impacket library to exploit Netlogon vulnerability and perform unauthorized…
hackingyseguridad/smbShell script collection for SMB protocol auditing, vulnerability detection (EternalBlue, SMBGhost), null session enumeration, credential brute-force,…
ally-petitt/cve-2023-43154-pocPoC for the type confusion vulnerability in Mac's CMS that results in authentication bypass and administrator account takeover.
emad-almousa/cve-2020-2969Proof-of-concept exploit for CVE-2020-2969 targeting unauthorized access to Oracle Database password hashes. Enables security researchers to test and…
emad-almousa/cve-2023-22074Proof-of-concept exploit for CVE-2023-22074, an Oracle Database Sharding component vulnerability enabling password hash exposure in versions 19c,…
redfox-security/digisol-dg-gr1321-s-password-storage-in-plaintext-cve-2024-4232Proof-of-concept demonstrating plaintext password storage vulnerability in Digisol DG-GR1321 routers, enabling credential exposure and unauthorized…