Explotación pública
Catálogo de exploits
Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.
86.679exploits catalogados
40.329CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.150Exploit-DB 24.488GitHub PoC 17.946VulnCheck XDB 10.016Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
17.946 exploits
GitHub PoC
LAB: TẤN CÔNG HỆ ĐIỀU HÀNH WINDOWS DỰA VÀO LỖ HỔNG GIAO THỨC SMB.
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
100RIESGO
abrir ↗GitHub PoC★ 2
Verify if your installed version of xz-utils is vulnerable to CVE-2024-3094 backdoor
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 3
CVE-2024-3094 - Checker (fix for arch etc)
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 14
Dockerfile and Kubernetes manifests for reproduce CVE-2024-3094
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 3
apocalypxze: xz backdoor (2024) AKA CVE-2024-3094 related links
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC
Script en bash para revisar si tienes la vulnerabilidad CVE-2024-3094.
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC
Em fevereiro de 2024, foi identificado duas novas vulnerabilidades que afetam o servidor JetBrains TeamCity (CVE-2024-27198 e CVE-2024-27199)
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
100RIESGO
abrir ↗GitHub PoC★ 1
This Repository Includes Kubernetes manifest files for configuration of Honeypot system and Falco IDS in K8s environment. There are also Demo Application written with Node.js which is containing Remote Code Execution Vulnerability (CVE-2023-32314) for demonstrating all addvantages of this architecture to manage Honeypot systems
Sandbox Escape
48RIESGO
abrir ↗GitHub PoC
YangHyperData/LOGJ4_PocShell_CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
100RIESGO
abrir ↗GitHub PoC★ 1
cjybao/CVE-2024-1709-and-CVE-2024-1708
Authentication bypass using an alternate path or channel
100RIESGO
abrir ↗GitHub PoC★ 1
Exploit for CVE-2024-20767 affecting Adobe ColdFusion
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir ↗GitHub PoC★ 1
Exploit for CVE-2024-20767 affecting Adobe ColdFusion
ColdFusion | Improper Access Control (CWE-284)
100RIESGO
abrir ↗GitHub PoC★ 3
Herramientas de linux para diferentes funciones.
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 3555
notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 1
galacticquest/cve-2024-3094-detect
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC★ 17
XZ Backdoor Extract(Test on Ubuntu 23.10)
Xz: malicious code in distributed source
70RIESGO
abrir ↗GitHub PoC
This is my malware
RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a
100RIESGO
abrir ↗GitHub PoC★ 4
Education purpose for CVE-2018-10933
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client coul
85RIESGO
abrir ↗GitHub PoC
spidygal/CVE-2024-3094-Nmap-NSE-script
Xz: malicious code in distributed source
70RIESGO
abrir ↗Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.