exploits

Exploit development

CVE-2021-22204

improved PoC for the ExifTool DjVu RCE, builds the payload with djvumake alone so no patched exiftool is needed

CVE-2021-21425

improved PoC for the Grav Admin unauthenticated RCE, with a real CLI and automatic payload encoding

CVE-2022-44384

Python 3 port of the rConfig 3.9.6 upload-to-RCE PoC, fixing the three faults that stopped the published version running

CVE-2021-3156

sudo Baron Samedit overflow, built to static-link the launcher so it runs against targets on older glibc

tomcat-manager-war-rce

authenticated Tomcat Manager WAR deploy to RCE, builds the archive in memory and pairs the CSRF nonce with its session