bigb0x

CVE-2024-36991. POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.

CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances

CVE-2024-6387. Bulk Scanning Tool for OpenSSH CVE-2024-6387, CVE-2006-5051 , CVE-2008-4109 and others.

CVE-2024-36401. POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.

CVE-2024-40348. POC for CVE-2024-40348. Will attempt to read /etc/passwd from target

CVE-2024-34102. POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce.

ssh-log-auditor. Python

OpenSSH-Scanner. OpenSSH Vulnerabilities Scanner: Bulk Scanning Tool for 21 different OpenSSH CVEs.

CVE-2024-28995. CVE-2024-28995 POC Vulnerability Scanner

CVE-2024-29973. POC for CVE-2024-29973

CVE-2024-31982. POC for CVE-2024-31982: XWiki Platform Remote Code Execution > 14.10.20

CVE-2024-4879. Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability

CVE-2024-7954. This exploit will attempt to execute system commands on SPIP targets.

CVE-2024-34470. POC and bulk scanner for CVE-2024-34470

CVE-2024-21514. SQL Injection POC for CVE-2024-21514: Divido payment extension for OpenCart

CVE-2024-24919-Sniper. CVE-2024-24919 Sniper - A powerful tool for scanning Check Point Security Gateway CVE-2024-24919 vulnerability. Supports single & bulk scanning, multithreading, and generates detailed CSV reports. Ideal for penetration testers and security researchers.

CVEs. My publicly published CVEs

JEA-Tool. A PowerShell script to configure Just Enough Administration (JEA) for automation tools like Ansible and BMC Discovery.

shodan-parser. Python

CVE-2024-21887. This is a modified version of "CVE-2024-21887 Exploit Tool " A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

CVE-2024-36527. POC for CVE-2024-36527: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal