Penetration_Testing_POC

Penetration_Testing_POC

Collect and share POCs, scripts, tools, articles, and other techniques used in penetration testing, as a note. Contributions welcome.

Please note that all tools may have backdoors or other anomalous behavior; it is recommended to operate in a virtual environment.

• Penetration_Testing_POC
• Please make good use of search [Ctrl+F]
• IOT Device&Mobile Phone
• Web APP
• Privilege Escalation Assistance Related
• PC
• tools - Collection of Small Tools
• Articles/Books/Tutorials Related
• Description

Please make good use of search [Ctrl+F]

IOT Device&Mobile Phone

• Tianyi Skyworth awifi router has multiple unauthorized access vulnerabilities
• Huawei WS331a product management page has CSRF vulnerability
• CVE-2019-16313 Fengwang Interconnect Enterprise Router v4.31 Password Disclosure Vulnerability
• D-Link Router RCE Vulnerability
• CVE-2019-13051 - Pi-Hole Router Ad-blocking Software Command Injection & Privilege Escalation
• D-Link DIR-859 - RCE UnAutenticated (CVE-2019–17621)
• Huawei HG255 Directory Traversal|Local backup file
• D-Link Devices - Unauthenticated Remote Command Execution in ssdpcgi (Metasploit)CVE-2019-20215(Metasploit)%20CVE-2019-20215.rb)
• From Interfaces.d to RCE: Vulnerability Discovery in Mozilla WebThings IoT Gateway
• Xiaomi Series Router Remote Command Execution Vulnerabilities (CVE-2019-18370, CVE-2019-18371)
• Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload - Replace firmware without authentication)
• cve-2020-8634&cve-2020-8635|Wing FTP Server 6.2.3 Privilege Escalation Vulnerability Discovery Analysis and Reproduce Process|Wing FTP Server 6.2.5 Privilege Escalation
• CVE-2020-9374-TP LINK TL-WR849N - RCE
• CVE-2020-12753 - LG Smartphone Arbitrary Code Execution Vulnerability
• CVE-2020-12695 - UPnP Security Vulnerability
• 79 Netgear Routers Hit by Remote Takeover 0day
• dlink-dir610-exploits-Exploits for CVE-2020-9376 and CVE-2020-9377
• wacker: A set of scripts to assist in performing online dictionary attacks against WPA3 access points
• CVE-2020-24581 D-Link DSL-2888A Remote Command Execution Vulnerability Analysis-Original URL
• CNVD-2021-14536 Ruijie RG-UAC Unified Internet Behavior Management Audit System Account Password Information Disclosure Vulnerability
• CNVD-2021-14544: Hikvision Stream Media Management Server Arbitrary File Read
• CNVD-2020-25078: D-link Sensitive Information Leakage, can directly obtain account passwords to view monitoring
• ios-gamed-0day
• ios-nehelper-wifi-info-0day
• ios-nehelper-enum-apps-0day
• iOS 15.0.1 RCE PoC
• DarkSword-RCE: Apple iOS Remote Code Execution Exploit|darksword-kexploit: Apple iOS Kernel Exploit|DarkSword: Apple iOS Exploit
• CVE-2021-36260: Hikvision Product Command Injection Vulnerability
• CVE-2021-33044, CVE-2021-33045 Dahua Camera POC|Related Analysis|Login bypass Chrome extension
• CVE-2021-36260: Hikvision Command Injection Vulnerability|Another CVE-2021-36260 exploit script
• CVE-2021-41653: TP-Link TL-WR840N V5(EU) - RCE%20-%20RCE%20-%20CVE-2021-41653.pdf)
• DirtyPipe-Android: Dirty Pipe root exploit for Android
• CVE-2022-30075: Tp-Link Archer AX50 Authenticated RCE
• NotQuite0day: D-Link 1960 Related Vulnerabilities
• HuaYuReportRCE: Huayu Digital Report Component GetShell
• IOT_Vul: Collection of IOT Related Vulnerabilities
• CameraHack: Batch scan and exploit common vulnerabilities in Hikvision, Dahua, etc. cameras
• CVE-2022-32832: Apple macOS APFS Kernel Arbitrary Code Execution Vulnerability
• HookWechatRecall: Intercept WeChat Recall Demo via Frida
• IOT_vuln: IOT Related Vulnerability Repository
• hikvision_CVE-2017-7921_auth_bypass_config_decryptor: Decrypt Hikvision configuration files affected by CVE-2017-7921