dothanthitiendiettiende Goto Github PK

cve

A collection of CVE POC code

cve-1

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

cve-2014-4377

cve-2017-0781

Blueborne CVE-2017-0781 Android heap overflow vulnerability

cve-2017-13253

PoC code for CVE-2017-13253

cve-2017-2370

on Mac 10.12.2

cve-2017-5124

Chrome < 62 uxss exploit (CVE-2017-5124)

cve-2017-5645

CVE-2017-5645 - Apache Log4j RCE due Insecure Deserialization

cve-2017-7089

Safari 10 exploit (CVE-2017-7089)

cve-2017-7092-exploit

This is the Pwn2Own 2017 Safari backup vul's exploit.

cve-2018-0296

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296)

cve-2018-0297

Test CVE-2018-0296 and extract usernames

cve-2018-1002105

Test utility for cve-2018-1002105

cve-2018-11686

CVE-2018-11686 - FlexPaper PHP Publish Service RCE <= 2.3.6

cve-2018-15473-exploit

Exploit written in Python for CVE-2018-15473 with threading and export formats

cve-2018-16341

CVE-2018-16341 - Nuxeo Remote Code Execution without authentication using Server Side Template Injection

cve-2018-17463

Working Proof of Concept Exploit for CVE-2018-17463

cve-2018-3191

CVE-2018-3191-PoC

cve-2018-3252

CVE-2018-3252-PoC

cve-2018-4121

macOS 10.13.3 (17D47) Safari Wasm Exploit

cve-2018-4233

Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018

cve-2018-4407

Crash macOS and iOS devices with one packet

cve-2018-4407-ios

POC: Heap buffer overflow in the networking code in the XNU operating system kernel

cve-2018-4408

IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]

cve-2018-8440

CVE-2018-8440 standalone exploit

cve-2018-9539

PoC code for CVE-2018-9539

cve-2019-0708

Totally legitimate

cve-2019-0841

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

cve-2019-0841-bypass

A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.

cve-2019-1003000-jenkins-rce-poc

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)