mpgn Goto Github PK

1mm0rt41pc

aardwolf

Asynchronous RDP client for Python (headless)

achat-reverse-tcp-exploit

Tested on AChat 0.150 Beta 7 Windows 7/8/10 x86/x64

actuator-testbed

A vulnerable application exposing Spring Boot Actuators

astudiaeth

Master CSI

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

beast-poc

:muscle: Proof Of Concept of the BEAST attack against SSL/TLS CVE-2011-3389 :muscle:

bloodhound

Six Degrees of Domain Admin

builder

byp-sop

🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️

c2-n-hop-with-ssf

https://mpgn.github.io/c2-n-hop-with-ssf/

chisel

A fast TCP tunnel over HTTP

cobaltstrike

CobaltStrike's source code

copper-jekyll-theme

Copper Jekyll theme - simple and useful

crime-poc

:hocho: CRIME attack PoC : a compression oracle attacks CVE-2012-4929 :hocho:

cve-2018-11686

CVE-2018-11686 - FlexPaper PHP Publish Service RCE <= 2.3.6

cve-2018-16341

CVE-2018-16341 - Nuxeo Remote Code Execution without authentication using Server Side Template Injection

cve-2018-17246

CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13

cve-2018-19276

CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE

cve-2018-3760

Rails Asset Pipeline Directory Traversal Vulnerability

cve-2019-0192

RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl

cve-2019-19781

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

cve-2019-3799

CVE-2019-3799 - Spring Cloud Config Server: Directory Traversal < 2.1.2, 2.0.4, 1.4.6

cve-2019-5418

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

cve-2019-7238

🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻

cve-2019-7609

RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer

cve-2019-9580

CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE

cve-2019-9978

CVE-2019-9978 - RCE on a Wordpress plugin: Social Warfare < 3.5.3

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

discord-e2e-encryption

:key: Tampermonkey script that encrypt and decrypt your messages on Discord :key: