
nosqli-flintcms
Blind noSQL injection case study lab based on CVE-2018-3783

Blind noSQL injection case study lab based on CVE-2018-3783

Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 1.1.1 [T1574.008]

Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)

Exploit module for VelotiSmart local file inclusion (CVE-2018-14064) that retrieves sensitive files from vulnerable web servers.

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

An exploit for CVE-2018-5955 GitStack 2.3.10 Unauthenticated RCE

Working Python test and PoC for CVE-2018-11776, includes Docker lab

CVE-2018-8174 - VBScript memory corruption exploit.

Metasploit module and Python script to generate SWF payloads exploiting CVE-2018-15982, a use-after-free vulnerability in Adobe Flash Player enabling…

Exploit Generator for CVE-2018-8174 & CVE-2019-0768 (RCE via VBScript Execution in IE11)

CVE-2018-9276 PRTG < 18.2.39 Reverse Shell (Python3 support)

CVE-2018-1000861 Exploit

Ejecución de exploit de deserialización con CVE-2017-5941

A Proof-of-Concept (PoC) exploit for CVE-2018-16763 (Fuel CMS - Preauthenticated Remote Code Execution).

Metasploit module generating a malicious Word document to exploit CVE-2018-8174, a VBScript memory corruption vulnerability in Microsoft Office…

Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

CVE-2018-9276 PRTG < 18.2.39 Authenticated Command Injection (Reverse Shell)