Catálogo de exploits

Log4Shell (CVE-2021-44228)

CRAReady SBOM test fixture — Java/Maven app with Log4Shell (CVE-2021-44228), Spring4Shell, Text4Shell, and other critical CVEs

Linux Kernel LPE PoC (CVE-2026-31431)

IDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.

CVE-2026-41940 Direct Shell Acess

Easy-to-understand version of CVE-2026-31431

CVE-2026-31431 - Copy Fail - PoC exploit

SSH posture helper for CVE-2026-31431 (Copy Fail): kernel and algif_aead inventory

Exploitation of CVE-2023-44604. Using a Kali Linux VM (attacker) and a Debian 11 server VM (victim)

cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script

CVE-2026-31431 (Copy Fail) PoC - Linux kernel page cache corruption via authencesn AF_ALG + splice()

simantchaudhari/CVE-2025-24054-PoC

对 CVE-2026-31431 的复现分析、C 改编的 exp。

CVE-2026-31431 - Copy Fail | Linux LPE via authencesn page cache write. Unprivileged user to root on most distros since 2017. PoC in C and Python.

Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel/WHM, built for automated target validation and high-speed multi-threaded execution.

george1-adel/CVE-2026-41940_exploit

CVE-2026-31431 Kernel Fix Script

CVE-2026-31431 mitigation (Copy Fail)

CVE-2026-31431 (copy.fail) — adapted for constrained Java execution environments via FFM syscall layer + javac annotation processor delivery

cPanel/WHM Authentication Bypass (Zero-Day Vulnerability)

CVE-2025-59528 Proof of Concept

Winrar Exploit CVE-2023-38831

Gogs CVE-2025-8110 RCE Exploit

High fidelity scanner for CVE-2026-41940 (cPanel & WHM authentication bypass)

Detection rules for CVE-2026-31431 Linux LPE Vulnerability - Credit: (Copy Fail) https://copy.fail

Black-box penetration test against HackSudo Thor : CVE-2014-6271 Shellshock RCE through Apache mod_cgi, chained with sudo misconfiguration and bash eval injection for full privilege escalation. Includes custom CSRF-aware brute force tooling and Metasploit RPC automation.

Temporarily removes the root password using CVE-2026-31431

Penetration test report for MegaQuagga Publishing documenting a six-phase engagement that chained CVE-2019-9978 and CVE-2023-4842 to achieve unauthenticated Remote Code Execution and a persistent Meterpreter session. Includes full methodology, exploitation evidence, and prioritized remediation recommendations.

Remediation report for MegaQuagga Publishing validating the mitigation of CVE-2019-9978 through progressive defensive layering. Documents reverse proxy insertion, ModSecurity WAF deployment, Graylog SIEM integration, and SSL/TLS enforcement using multi-stage Wireshark PCAP analysis across pfSense WAN and LAN interfaces.

My first hands-on Intel 471 threat hunting workshop experience investigating CVE-2023-46604 using Elastic SIEM, vulnerability intelligence, and post-exploitation detection.